lumma | word[.]zip

resource	yara_rule
static1/unpack001/word-Visualizador.exe	family_lumma_V2

resource
unpack001/bin/NSOCR.dll
unpack001/bin/NsBars.dll
unpack001/bin/NsImgLdr.dll
unpack001/bin/NsSpell.dll
unpack001/bin/jnsocr.dll

word.zip

SHA256 db782aed8ef4fab6299d2d08ca2f695762535847a1e6e77b117fc2c7eb36da33
MD5 2065356a29de858b29e54be9111caa38
SHA1 5c6416f041e2a2ed47056200d76a6f1f5eecebc6
SHA512 51333037e48943ca48fa7f73eb1949955901e672a478c60ee64e8dc674777ae9f15ef23e390a2b8aa0e3abc84ae67e08754894c07410c250a616a95119f2c502
SSDEEP 1572864:1coUN9zmk+jAi/99i7wR4X/E6Fsv8THJtnUh:1cjg/ri44X/JFS8THJlUh
MD5 SHA1 SHA512 SSDEEP

ar.ini

SHA256 70d97fdd9a422bc972a0f83ce1c5cf6b7aef445d02675c1ae9cd27bc5f90d409
MD5 b8bbadce43ad75e74fa8a88079ed441e
SHA1 db448e0d45c60fe62a2f4e7606259b8145bca646
SHA512 5d3b1d0a2487eef33bfe21e22452ee392066a2c57771f6e972e16726970688356671ee85faa5f35ca33e7c2c0a66613cd59cb695ec63119dde46a4020d917243
SSDEEP 384:9C+ATF0Y/tSVhPq3Pf88ZfPrUuD90+lx6QPaN2B59cWN4H47zNCzTgTffr2li6GW:zATF0Y/tSV5q/f88ZfPrUuD90+WNapR+
MD5 SHA1 SHA512 SSDEEP

bg.ini

SHA256 c25d1e50641f824a6c38fc048f08a0f1a6de3e0012131c7d4b32434bbf0c4fbe
MD5 31b8ebf26a34d51c309763d1ae6dc19c
SHA1 e9a2dff74e5426698b63e822567f12eab13ab58a
SHA512 5c8824c6ac988f0e6d08d1f9a3ce9ce8f6b4d075d7f0260bac9737085b3d751e5104c4bac90ab00cc0657ff1114fd4d444787259ecb8350c06ab72553a51dbf1
SSDEEP 384:xOQmO1CIF3XVtzfnO3vShvOcAqPfmIxjcAicm29GPPYBrmbBt:xPmO1CIF3XVtzfnO3vShvOcAifmJRch2
MD5 SHA1 SHA512 SSDEEP

bin/ALL_base.dat

SHA256 cfa85ed98f0fdc2b7a4954ba3fc4babb51e23309606dcc01e067c94e68b0f99e
MD5 a227bb771f25cd48c96eb954020142fe
SHA1 f492674c0bf625bbecbca2814b1d1565825a199c
SHA512 7246b6e543a59e3e16897929c254183ca53166c34c79922e59464838ff5139f1b94f79a8b9c03ab42b5ce5b3b6c8d768ca8998e373d50185a57953aaa0078879
SSDEEP 49152:o8RwUCDo0SZ12uQDvkmp1jxaEITtQC4P9/7eUFgyTLspFmF7L/GaTUMykJ8H32:o8RwMu4QtPsV4bH4xPH32
MD5 SHA1 SHA512 SSDEEP

bin/BG.lng

SHA256 28069c229a754daa36cec26d9a391a02717b14084a1b38267542785780ba8a0b
MD5 fd3e5455fc9454f3dcc712ed84707355
SHA1 cabb02eccb67d627e0530691b0ae71996c3c467e
SHA512 413a8b288f93011db772be9e4ccc021ef90ea0dbf7f328a1427024994a68f4462d6c65cd787dee16b97e8f09fd40922610787ba79412b1d9627de3b1db444d40
SSDEEP 6144:/0dNVbN4pp869o8XMxMAPRhDD/WrRU2iSAkI9f/oZpl9lS3ln4kH:/0dmpp1+8XoPvDUxxMfg3laBHH
MD5 SHA1 SHA512 SSDEEP

bin/CA.lng

SHA256 a1be2471b5bea7b6565b147f63c1307f62abe408c65e9eae02708b62de6e93c9
MD5 283786cf6f0507bd687eb9b500234290
SHA1 4e7394c6724fcaf489e7f6744b1f84d2e5286182
SHA512 70c259a1b7ed855fb867a2900a511312b7c7535f899549978c34cc64a4179147565eca52e9ab6ac5bbe741e4468c0b09faf821c07844a540216c4311c5406905
SSDEEP 6144:KJPylmQtb/b2Ml8WEZGCAsHoQyFCM9xVQbfEoTBssUveZzoO8wKVqTPLjXn+2E3p:KRylLtbplF6H8CEVQRmveNodwKVcPk9f
MD5 SHA1 SHA512 SSDEEP

bin/CS.lng

SHA256 296826e531c7fb4ab342df66e37c5b0fda96426fcd4c241e6b2c2915f25564e7
MD5 23ecdb01c49b965dbabf78d94974692a
SHA1 1e775460a66b7541555790331f058dda00005bb8
SHA512 be14b13aa0f9dd734afd43e87b1f6622fa76b07acb5bf1745002120851a1283a8c992ba7648c337306fe351d678ee42db155900bb8f0362a48a479f978e79381
SSDEEP 24576:2+4FLSMPKd9RD9sxWpDOuQVopYSMUei1JDWJKKo:YDPURhsccGpYSheiDn
MD5 SHA1 SHA512 SSDEEP

bin/Config.dat

SHA256 28b8424812c76765ff26f44d3e709e404b0531ba602bc7b1029c8038ba4c1d97
MD5 98a324a8cee8c2bf63f54eaa762b5a86
SHA1 27965caca83b9927a7fcce2c8f0a52b5e806b679
SHA512 198a9da2af3213a58557e111f768b8e97f36f4938c608c03cb4a6ca8aa2b8e1cd7924dc3e7847877faddd20a0153da88a1c20cd9b6fa5651695b2a127a83782e
SSDEEP 192:9FobV0bZr/1YoIa3mGEdNDjiKgf3zabzSDDBp7pBtnBo/+Ss9892YFClHDNSJlPl:9F0aDFp7pBtBoeOrx
MD5 SHA1 SHA512 SSDEEP

bin/DA.lng

SHA256 5adfed19cc5b25acc8a575d47ceb0ec462faf10756f80aeb3d022f9b396499f1
MD5 c9e707f8b6d409f2c4ef483900d2a0f5
SHA1 0c750ba8e838366b1cb0a02217edc4c18266020f
SHA512 64410fb74905c8e021d3212036cd9caf9c500919aac496cf08a09d6f272e2bdf33f29b8ff4a1b2f51e67199426b53b53c61719fb88def443b5bd92490564f166
SSDEEP 12288:clgDqDAOD2ViKv/iN66ZOfS6upgRYG10tRtjoc1QTSzH3wkkN:cKDoxD2ViQJ6Z6iXoc2SU5N
MD5 SHA1 SHA512 SSDEEP

bin/DE.lng

SHA256 aa45a1ad4818dc896e28185be6f26401020ee703a3035c9b68b6ec790a05fb4e
MD5 ad75b803d97507ee01d06caf5e58201a
SHA1 e9505abcec05bdcf22612d1ac9d7e6ffee7a1cef
SHA512 14ffaa7f10501ffa860750e6e8f1b5992aa18839965dcff8b3e22d59437399f7dde461ba3080077bbc870143174cf98020544d36550f777f743450e524a1fb94
SSDEEP 49152:T0Y7lReRy6xnSh+M9uPs/Ymx6TWHfjcFozV/cEO0+zpV5wRaYz+hYdHgVy:Tj6Ry6xnmQPkYXaHfjEEO0+z9wrQYdHl
MD5 SHA1 SHA512 SSDEEP

bin/EN.lng

SHA256 a752c508a3d22900b025e21eb40860c01b5a4b4668e6a8b80045cde068f348a8
MD5 80d60612d15ebdaf42c4623092303596
SHA1 9f3d1a4527f36be22522218d84e71f0ee952794c
SHA512 bda99300c435b578b8bbdc331ca2d000cc9960dfa2e5678cf4fbe2f9635a297d1885c9db970d8ec6c0e0c6175b09232ad18f4c941334621c4ad2add5012051dd
SSDEEP 6144:DmhIKnOaji2E+TUClCifcPcvxsn9O9hhgph2eehBy9t+:+i2pDlChEvxRjsh27hByS
MD5 SHA1 SHA512 SSDEEP

bin/ES.lng

SHA256 d0a0e0832b07df978d753269aff029fb9ce7c53f4b5ef511395d2a6b2eb12350
MD5 446198551d96e6d505c13e7215ecd424
SHA1 8159f0e6d40022431b5ff313831e43dc58bec77f
SHA512 9ea453ef09e6641971341635b06c2f7327a425cf4bb940575405d1508152dfc8ae61a2a354ecac4b41b28c993e5ab5d75ad8d0acd0977d86b712773ed0a82f8b
SSDEEP 6144:OiZI+y7XAnOlUrbMphD46L2/ZvNLlHOVATyLqVixYMnvReBpOt:OiZG7Q6DhSVNGAHQYBp4
MD5 SHA1 SHA512 SSDEEP

bin/ET.lng

SHA256 dba79259fa9c5a0263825a2fffc87cc1f098ba3ed3416b85e65fcaa7879ffa82
MD5 cb29ff32ff9b3694bd83177358f2a48c
SHA1 309a9908f725967d143d4da4d0eadd144b9ff40e
SHA512 84d3e5dc50c5f4ae47a4e7d15e533fa798958a31d2c439af727aa0167a0c6932fd0b9ffba2ee97bc6d19222ecc6def2639caad975d0fff734132210317f75cdf
SSDEEP 24576:dqcNTYKzYAZHwhbHS3od9pHCioXb+gAhgdJ5HYSK:dhNTYKzYAZQk3KqioXbAYJav
MD5 SHA1 SHA512 SSDEEP

bin/FN.lng

SHA256 5eb0752ab5e2fab6ed77361df48b7bce953befee04fa3da9b8b08af1e3e3496d
MD5 4232a31fb8b435541f5b704731ce1906
SHA1 4125ab9d20e0252b773a8625c7b42f4f1f3f0aa3
SHA512 9faa1716e694f8d4376f2521be1769d352938bfd7b7d521e683c640f4650a96c0e23a1be37161b32698ea6e1104b7b18b0d0b1f2f4c956fbe030e877b4c5c528
SSDEEP 49152:6YfAwHARHvx2UbzCq3ktrTJID1Y2P8UDnaSavPz6zbd3JWKgxISgSld:6SAwgVPb+qQGhY2PtDnaLPwbd3oKgxIY
MD5 SHA1 SHA512 SSDEEP

bin/FR.lng

SHA256 8bd102ea1a22b71d0452d4a38cea43e36b81e0f7e9dc34db7e4a6a6165f551b6
MD5 30d6ac6831901fee1c69023968d1b6b5
SHA1 194193aa324f5a1567e024c2e91f0980f4e2a75b
SHA512 eff1b64b0287ed80d844234b6de5bb99e52aa153a8256caea3239314f61789ad65e6322a8d392ffbd6d8b11d934e3cd9486a1eee2c5446ec86777e4896d8304f
SSDEEP 6144:3MTHwMFYHD08VNDiHgXlGo1maLlWIqno8MICblUbSiv:tcqo8VNWHgt1rLmnVMIkAH
MD5 SHA1 SHA512 SSDEEP

bin/HR.lng

SHA256 8f8f12fdc319875a54cdd5828951524f2c6a6f11333afba4a9e72aea0f804c12
MD5 3f08648af6a24cca829dcab5e2d75a19
SHA1 e6bec8d6f1bb43e63b5a12b1dde2e04735d53ee0
SHA512 0cc09d134f9856e540da0b4e052684020bff71e0e8d553fcf8550f3aad9b32ac4e794d726a9f46ff2c2a4160de9476977a9200f7e91f7f67c8a815cf26670f16
SSDEEP 12288:b7ENPAoVLVEv2d7UNrLG8AGuVjrbN0B9G2uj1MovNA0ghdSQ93/98PE0x/nnVIdL:89AoNav2dgNf7oXoMjRNAVQYK8cPGd2Y
MD5 SHA1 SHA512 SSDEEP

bin/HU.lng

SHA256 aca74f32fb5cc634911532d2333b0792836009ff4c67cf8090636208f4de093a
MD5 a01257d96ecb8be53f24251ef8693700
SHA1 ee12c03184b8cfc441f177c54848268689b1b6fc
SHA512 fa20b19539cf9ac700be1a58f362db9d3da62444f39fe9cccf0108b334e09f2549db6449ad80863434b622e6b70bec8e0334cc95555ed4cf8064a9b2edccb2e5
SSDEEP 12288:iApNRqAYDxDS/xgaqWVANUJFPLp8WqfW/3lSn13hZXha1ySwEiG5A/lszJWYiEzJ:tpNRrY1DS/xRjJF6Wl/1Sn1fXvSwpGAu
MD5 SHA1 SHA512 SSDEEP

bin/ICRDGT_base.dat

SHA256 82dc944f0d56e3aabfd0f154ca729b524eb9d4d2f40078f83f3031efc40dd926
MD5 3d48a910ae550bb881764a4985b7568b
SHA1 20dd3db09fb28f70bf80b873782dd91ffde2629b
SHA512 9a0f94240ab1497939eac1968d424f0dcde97e7835d467deb04feaa87af60a7c2ef6030a40e4be1c339b283bd2b6fa324494913ac4cec6c516e460e23f398492
SSDEEP 49152:uACqEWgoSf/+gT4kjQM/3Z2XfT0jylAma:uFxWAQM/3Zw0WOma
MD5 SHA1 SHA512 SSDEEP

bin/ID.lng

SHA256 0e11588cd93a9b4d78a175e670c5141d99700d667138632e996e8d78e381c899
MD5 d6aba8d8c32247f18c331b933e7adc46
SHA1 8136f98c49c9d3fc4424854d7227984b994a7b9a
SHA512 878a17b2c1e8398701fc22b1b5be4ac2baf4181499f3b8abcd095a4926daeac7214a656a6b7d5ded7bf8368bf5f480688e20d534641115a8e39d83d1b695e98d
SSDEEP 3072:9X4xwoBxht9aZzWQBCmqkYaoPbEF3P4b6J5TS:9zOKWQkSY/bEBf5S
MD5 SHA1 SHA512 SSDEEP

bin/IT.lng

SHA256 48e24422498247ed90bf79ecc8b6f92b96c35466918be884906cfc4969400bb7
MD5 4a53320483fc428ec214449c93aa2977
SHA1 cd0f8e094e59dcec2ecc8427a730a9f3532abc2b
SHA512 416f8016f3ff84adb8c07fc0d132b9cb16a8629df7c5396c4b37b7689f8de69bfb445532c57fe7d0ddb783ea23cf762c3eafcb6d46af70b87992f75aed0537fe
SSDEEP 6144:aOBZRSgL+HlgpsT4YEzxprfoHgNOdrFK8KIBznf9+90oLBL9G:7bOFyfrLwdrFKqZn1+906L9G
MD5 SHA1 SHA512 SSDEEP

bin/LT.lng

SHA256 8b14367cf3c5004214513c4c685fd914c879bed64c25195687fad1ecf278e7d4
MD5 0863ff1bd53ed857cce8c1395ad10385
SHA1 2863a084b0abb0ad27cea4a3fdde7f8f092f7c8e
SHA512 703c7c7b6178e15082d4844881544730a12c87d5bcc50ebf8236e198a102a1abe886d9410fa88f19bdb818ffd074f6d1397664f9e997b50e98f836cef657f8d8
SSDEEP 6144:mKFfjw4WEnJehs0fnZJdGOBL1wTexI+jh8/yUAFDjFQb+XVfX8+U7KcLS5sKJF5d:dFLbnD0hR912a3OAl66XVfM+Fc9StUk
MD5 SHA1 SHA512 SSDEEP

bin/LV.lng

SHA256 73cc1706d04eaf74069729deec9724985ca9cb744ff30c55f952b2cbcfd87f3f
MD5 60daa7192fbcf3d4c68ea5ff8102042c
SHA1 a8003c63437e33a5eb9b734fcf5f2ba9d8bb588c
SHA512 add6be694da5fda0da6d38eb0cfc07a2a77f9199e001678a4b56b2366058e91dced9d5c30c09a62332d060cd3b4b1ad4a5f29fbddde36d88a68aa4afd9750dae
SSDEEP 12288:3F4YRPit686LIdkU3J1AxrLsn0Fh6/aILHkBJaW978bn4sd9G3Qba88rAxcmZJO2:3OYc3J6qYNIbkaWQd9pba88rSc8DDsnq
MD5 SHA1 SHA512 SSDEEP

bin/NB.lng

SHA256 61aa74bbf2bedd172deafcade3dd4c79e62ff1863ebdf298d211a0175c7f4568
MD5 6014dcd8a9e5d540f3522d845ba46f89
SHA1 b7505b119c4b65de661e226164b4360c41fdcdba
SHA512 6e20add180dc69229b8c227bcec809d4caa9694116bf330244d4924dec8093d836db92484b1949ea12da435e10c562c68205aa0d60311fb247ff4bf6d0dc445a
SSDEEP 24576:jPEj/g7pHWX/qvmd1VecORp1i4gc3qnNpJ3VcSyZZNQ95p1Kuma:jcg7p2P5PORXVlGnG5NQnp2a
MD5 SHA1 SHA512 SSDEEP

bin/NL.lng

SHA256 7cc7c2198d148b5c8053de456b3c828dd421b64d237e6ddf2579046f433c0506
MD5 5d0749518f8123064ff3b0677ca400cd
SHA1 93065af3676ef5fac740eeeb3db22d58ba736e5c
SHA512 b068bd26cc45200c46980999d24786ba142bdd7c5ea7cd1e61f6c65bdb692e6b8499ae118a6765272d8cfaac7299bf02d16db5e51aa35acbb0a2c3c6d96c4122
SSDEEP 12288:w5E1Bapl0W2/f7dRADnAVrRv6TM+SbM/HgZLRJk5xLYz7HQsHqGbRrwHk/qJx:w5+Baper/fKnAVAInMGV2jAHQsHV5wHP
MD5 SHA1 SHA512 SSDEEP

bin/NSOCR.dll

IMPHASH ee7e9ae3ef629e19b12dcd9b44187e75
SHA256 3c8a6e9126bf505b86a4e4176d9d45de2965117d14b11d42ab3359d631024e7e
MD5 5d320299f6fcefe759626f0a07dde4f2
SHA1 aee8914fb193e8ebb7e57e55ef054776ac1781b1
SHA512 7e9fc8446cc0bf985ddcf40b457431d723b8124bd43038999aca03b42a2785b194808f458d60a5a8031feaa22340898df8f048e42ce549850ce931f6cfe3da29
SSDEEP 49152:MleC86EhPWpE//gD/2aUFuq8O7VC8hz4CXjqp8PxcdgCEUAolPSYfgv6TfN3qml4:uL8Fhu6//g65YF6VC6z4CuWPxcdgCEUz
MD5 SHA1 SHA512 SSDEEP

regsvr32 windows:6 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

6

Entry point

2038720

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

E:\NSOCR\Project\OCR_DLL\Release - PUBLIC\NSOCR.pdb

kernel32

GetStdHandle SetFilePointerEx ExitProcess GetFileType SetStdHandle HeapQueryInformation GetCommandLineW GetCommandLineA VirtualAlloc GetModuleHandleExW FreeLibraryAndExitThread CreateThread InterlockedFlushSList RtlUnwind OutputDebugStringW GetCPInfo LCMapStringEx GetStringTypeW LCMapStringW IsValidLocale EnumSystemLocalesW GetTimeZoneInformation GetConsoleMode ReadConsoleW GetConsoleCP FindFirstFileExW IsValidCodePage GetACP GetOEMCP GetEnvironmentStringsW FreeEnvironmentStringsW SetEnvironmentVariableW InitializeSListHead GetSystemTimeAsFileTime GetStartupInfoW IsDebuggerPresent WaitForSingleObjectEx ResetEvent TerminateProcess SetUnhandledExceptionFilter UnhandledExceptionFilter GetUserDefaultLCID GetTempFileNameW SearchPathW GetProfileIntW VerifyVersionInfoW VerSetConditionMask GetWindowsDirectoryW SystemTimeToTzSpecificLocalTime GetFileTime GetFileSizeEx GetFileAttributesExW FileTimeToLocalFileTime FindResourceExW lstrcpyW DuplicateHandle UnlockFile SetFilePointer SetEndOfFile LockFile GetVolumeInformationW GetFullPathNameW GetFileSize FlushFileBuffers CreateFileW GetCurrentDirectoryW FileTimeToSystemTime VirtualProtect GlobalFlags GetUserDefaultUILanguage GetSystemDefaultUILanguage GetLocaleInfoW GlobalGetAtomNameW SetErrorMode LocalReAlloc LocalAlloc GlobalHandle GlobalReAlloc TlsFree TlsSetValue TlsGetValue TlsAlloc InitializeCriticalSectionAndSpinCount WritePrivateProfileStringW GetPrivateProfileStringW GetPrivateProfileIntW lstrcmpA GetCurrentThread CreateEventW SetEvent GetCurrentProcessId CopyFileW FormatMessageW LocalFree GlobalSize MulDiv CompareStringW GlobalFindAtomW GlobalAddAtomW lstrcmpW GlobalDeleteAtom LoadLibraryA GetModuleHandleA GetSystemDirectoryW GetCurrentThreadId SetLastError OutputDebugStringA LoadLibraryExW lstrcmpiW EncodePointer GetThreadLocale SetThreadLocale GlobalUnlock GlobalLock GlobalFree GlobalAlloc CreateFileA WriteFile CreateNamedPipeA ReadFile WideCharToMultiByte MultiByteToWideChar GetTickCount GetTempPathW FindClose FindNextFileW FindFirstFileW VirtualQuery QueryPerformanceCounter GetModuleHandleW IsProcessorFeaturePresent GetSystemInfo GetVersionExW GetFileAttributesW GetModuleFileNameW GetCurrentProcess CloseHandle ResumeThread WaitForSingleObject SetThreadPriority CreateDirectoryW GetProcessHeap DecodePointer HeapAlloc FindResourceW RaiseException LoadResource HeapReAlloc LockResource GetLastError HeapSize InitializeCriticalSectionEx HeapFree SizeofResource DeleteFileW QueryPerformanceFrequency DeleteCriticalSection Sleep InitializeCriticalSection LeaveCriticalSection EnterCriticalSection LoadLibraryW FreeLibrary GetProcAddress ExitThread WriteConsoleW

user32

SetCursorPos BringWindowToTop GetSystemMenu IsZoomed DrawFrameControl DrawEdge SetParent SetWindowRgn SetClassLongW DrawStateW EmptyClipboard SetClipboardData CloseClipboard OpenClipboard EnumDisplayMonitors SetLayeredWindowAttributes GetKeyNameTextW MapVirtualKeyW GetMenuDefaultItem CreatePopupMenu NotifyWinEvent InvertRect HideCaret EnableScrollBar MessageBeep GetIconInfo DrawIconEx IsRectEmpty DrawFocusRect WindowFromPoint ReleaseCapture SetCapture GetNextDlgGroupItem LoadImageW TrackMouseEvent DestroyIcon KillTimer SetTimer DeleteMenu IntersectRect MapDialogRect GetAsyncKeyState GetNextDlgTabItem EndDialog CreateDialogIndirectParamW RealChildWindowFromPoint GetDesktopWindow LoadCursorW GetSysColorBrush OffsetRect SetRectEmpty SendDlgItemMessageA CopyImage SystemParametersInfoW InflateRect GetMenuItemInfoW DestroyMenu GetSystemMetrics SetCursor ShowOwnedPopups PostQuitMessage GetCursorPos GetActiveWindow LoadBitmapW SetMenuItemInfoW GetMenuCheckMarkDimensions SetMenuItemBitmaps EnableMenuItem CheckMenuItem GetWindowThreadProcessId RemoveMenu AppendMenuW InsertMenuW GetMenuState GetMenuStringW LoadMenuW ClientToScreen GetWindowDC TabbedTextOutW DrawIcon DrawTextExW DrawTextW IsDialogMessageW SetWindowTextW IsWindowEnabled CheckDlgButton MoveWindow ShowWindow GetMonitorInfoW MonitorFromWindow WinHelpW GetScrollInfo SetScrollInfo LoadIconW CallNextHookEx UnhookWindowsHookEx SetWindowsHookExW GetWindow GetLastActivePopup GetTopWindow GetClassNameW GetClassLongW SetWindowLongW GetWindowLongW PtInRect EqualRect CopyRect GetSysColor MapWindowPoints ScreenToClient AdjustWindowRectEx GetWindowRect GetWindowTextLengthW GetWindowTextW RemovePropW GetPropW SetPropW GetScrollRange ScrollWindow RedrawWindow ValidateRect EndPaint BeginPaint SetForegroundWindow GetForegroundWindow SetActiveWindow UpdateWindow TrackPopupMenu GetMenuItemCount GetMenuItemID GetSubMenu SetMenu GetMenu GetCapture GetKeyState GetFocus SetFocus GetDlgCtrlID GetDlgItem IsIconic EnableWindow InvalidateRect GetParent SetScrollPos GetClientRect SetScrollRange GetScrollPos UnregisterClassW SendMessageW ShowScrollBar CharLowerW CharUpperW TranslateMessage DispatchMessageW GetMessageW CharNextW RegisterWindowMessageW PeekMessageW GetMessagePos GetMessageTime PostMessageW DefWindowProcW CallWindowProcW RegisterClassW GetClassInfoW GetClassInfoExW CreateWindowExW IsWindow IsMenu IsChild DestroyWindow SetWindowPos GetWindowPlacement SetWindowPlacement BeginDeferWindowPos DeferWindowPos EndDeferWindowPos IsWindowVisible UnionRect UpdateLayeredWindow MonitorFromPoint LoadAcceleratorsW CopyIcon TranslateAcceleratorW InsertMenuItemW UnpackDDElParam MessageBoxW GetDC FillRect FrameRect ReleaseDC DestroyCursor GetWindowRgn CreateMenu SubtractRect TranslateMDISysAccel DefMDIChildProcW DefFrameProcW DrawMenuBar GetUpdateRect IsClipboardFormatAvailable CharUpperBuffW RegisterClipboardFormatW ModifyMenuW GetDoubleClickTime SetMenuDefaultItem LockWindowUpdate SetRect CopyAcceleratorTableW DestroyAcceleratorTable CreateAcceleratorTableW GetKeyboardState ToUnicodeEx MapVirtualKeyExW IsCharLowerW GetKeyboardLayout WaitMessage PostThreadMessageW GetComboBoxInfo GrayStringW ReuseDDElParam

msimg32

TransparentBlt AlphaBlend

winspool.drv

OpenPrinterW DocumentPropertiesW ClosePrinter

advapi32

RegQueryValueExW FreeSid AllocateAndInitializeSid RegOpenKeyExW RegEnumKeyExW RegCloseKey RegDeleteValueW RegSetValueExW RegCreateKeyExW RegDeleteKeyW RegQueryInfoKeyW RegEnumKeyW RegQueryValueW RegEnumValueW CheckTokenMembership

shell32

SHAppBarMessage SHBrowseForFolderW DragFinish DragQueryFileW SHGetDesktopFolder SHGetSpecialFolderLocation SHGetPathFromIDListW SHGetSpecialFolderPathW SHGetFileInfoW ShellExecuteW

shlwapi

PathRemoveFileSpecW PathStripToRootW PathIsUNCW PathFindFileNameW PathFindExtensionW StrFormatKBSizeW

gdi32

CreateFontIndirectW CreateSolidBrush DeleteObject SetStretchBltMode MoveToEx CreatePen LineTo GetTextExtentPoint32W DeleteDC StretchBlt CreateCompatibleDC CreateDIBSection SelectObject BitBlt CreateCompatibleBitmap SetTextColor StretchDIBits SetBkColor GetObjectW CreateBitmap CreateHatchBrush CreatePatternBrush CreateRectRgn Escape ExcludeClipRect GetClipBox GetDeviceCaps GetObjectType GetPixel GetStockObject GetViewportExtEx GetWindowExtEx IntersectClipRect PtVisible RectVisible RestoreDC SaveDC SelectClipRgn ExtSelectClipRgn SelectPalette SetBkMode SetMapMode SetLayout GetLayout SetPolyFillMode SetROP2 SetTextAlign TextOutW SetViewportExtEx SetViewportOrgEx SetWindowExtEx SetWindowOrgEx OffsetViewportOrgEx OffsetWindowOrgEx ScaleViewportExtEx ScaleWindowExtEx CopyMetaFileW CreateDCW CombineRgn CreateRectRgnIndirect PatBlt SetRectRgn DPtoLP GetTextMetricsW EnumFontFamiliesExW CreatePalette GetNearestPaletteIndex GetPaletteEntries GetSystemPaletteEntries RealizePalette GetBkColor CreateDIBitmap EnumFontFamiliesW GetTextCharsetInfo SetPixel SetDIBColorTable CreateEllipticRgn Ellipse GetTextColor CreatePolygonRgn Polygon Polyline CreateRoundRectRgn LPtoDP Rectangle GetRgnBox OffsetRgn RoundRect FillRgn FrameRgn GetBoundsRect PtInRegion ExtFloodFill SetPaletteEntries SetPixelV GetWindowOrgEx GetViewportOrgEx GetTextFaceW ExtTextOutW

uxtheme

GetThemePartSize GetThemeSysColor IsThemeBackgroundPartiallyTransparent IsAppThemed GetWindowTheme DrawThemeText DrawThemeParentBackground OpenThemeData CloseThemeData DrawThemeBackground GetThemeColor GetCurrentThemeName

ole32

CoLockObjectExternal RevokeDragDrop OleLockRunning OleCreateMenuDescriptor OleDestroyMenuDescriptor OleTranslateAccelerator IsAccelerator RegisterDragDrop OleGetClipboard DoDragDrop CreateStreamOnHGlobal CoInitializeEx CoDisconnectObject CoCreateGuid CoUninitialize ReleaseStgMedium OleDuplicateData CoTaskMemRealloc CoTaskMemFree StringFromGUID2 CoTaskMemAlloc CoCreateInstance FreePropVariantArray CoInitialize

oleaut32

SafeArrayCreate SafeArrayUnaccessData SafeArrayLock SafeArrayGetVartype VariantCopyInd SafeArrayGetLBound SafeArrayUnlock SafeArrayGetUBound LoadRegTypeLi SafeArrayDestroy SafeArrayRedim SysAllocStringLen VariantInit VariantChangeType SafeArrayAccessData VariantTimeToSystemTime VariantClear UnRegisterTypeLi LoadTypeLi RegisterTypeLi VariantCopy VarBstrFromDate SysStringLen VarUI4FromStr SysFreeString SystemTimeToVariantTime SysAllocString

wtsapi32

WTSSendMessageW

gdiplus

GdipDrawImageRectI GdipCreateBitmapFromHBITMAP GdipDrawImageI GdipDeleteGraphics GdipBitmapUnlockBits GdipBitmapLockBits GdipCreateBitmapFromScan0 GdipCreateBitmapFromStream GdipGetImagePaletteSize GdipGetImagePalette GdipGetImagePixelFormat GdipGetImageHeight GdipGetImageWidth GdipGetImageGraphicsContext GdipDisposeImage GdipCloneImage GdiplusStartup GdipFree GdipAlloc GdiplusShutdown GdipSetInterpolationMode GdipCreateFromHDC

oleacc

LresultFromObject AccessibleObjectFromWindow CreateStdAccessibleObject

imm32

ImmReleaseContext ImmGetOpenStatus ImmGetContext

winmm

PlaySoundW

Blk_GetBackgroundColor Blk_GetBarcodeCnt Blk_GetBarcodeRect Blk_GetBarcodeText Blk_GetBarcodeType Blk_GetCharCnt Blk_GetCharQual Blk_GetCharRect Blk_GetCharText Blk_GetLineCnt Blk_GetLineText Blk_GetRect Blk_GetText Blk_GetTextRect Blk_GetType Blk_GetWordCnt Blk_GetWordFontColor Blk_GetWordFontSize Blk_GetWordFontStyle Blk_GetWordQual Blk_GetWordText Blk_Inversion Blk_IsWordInDictionary Blk_Mirror Blk_Rotation Blk_SetRect Blk_SetType Blk_SetWordRegEx Blk_SetWordText Cfg_Create Cfg_DeleteOption Cfg_Destroy Cfg_GetOption Cfg_LoadOptions Cfg_LoadOptionsFromString Cfg_SaveOptions Cfg_SaveOptionsToString Cfg_SetOption DllCanUnloadNow DllGetClassObject DllInstall DllRegisterServer DllUnregisterServer Engine_GetVersion Engine_Initialize Engine_InitializeAdvanced Engine_SetDataDirectory Engine_SetLicenseKey Engine_Uninitialize Img_AddBlock Img_CalcPointPosition Img_CopyCurrentPage Img_Create Img_DeleteAllBlocks Img_DeleteBlock Img_Destroy Img_DrawToDC Img_GetBlock Img_GetBlockCnt Img_GetBmpData Img_GetImgText Img_GetPageCount Img_GetPixLine Img_GetPixLineCnt Img_GetProperty Img_GetScaleFactor Img_GetSize Img_GetSkewAngle Img_LoadBlocks Img_LoadBmpData Img_LoadFile Img_LoadFromMemory Img_OCR Img_SaveBlocks Img_SaveToFile Img_SaveToMemory Img_SetPage Img_Unload Ocr_Create Ocr_Destroy Ocr_ProcessPages Scan_Create Scan_Destroy Scan_Enumerate Scan_ScanToFile Scan_ScanToImg Svr_AddPage Svr_Create Svr_Destroy Svr_GetText Svr_NewDocument Svr_SaveToFile Svr_SaveToMemory Svr_SetDocumentInfo

bin/NsBars.dll

IMPHASH 7fba1798ccc2e1b3f68b4a089a51ae01
SHA256 cd6e459d348f04b3cd713304b62afd1d4b84d6b05e9d60b42eea377c417d1761
MD5 c22b4cce8a6c064faaa4f93b59b15440
SHA1 a05c2b0c211d4d5827349326c581171f75d5bf09
SHA512 47a06b9658f181a48865d90eaec7f857e867bb2f8ac5b284c444b0e90dbc07188777e0cdb7cbf4cd098d70c78b8b763d6308ed63d3563caaef7ce3e256abc018
SSDEEP 196608:iRwRLEt9G3UydHt/sYSOOx6PhynS3YyPQrpxC:imRItKUydN/XS9STQrpxC
MD5 SHA1 SHA512 SSDEEP

windows:6 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

6

Entry point

6821982

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

Name

.text

Size

Virtual Size

848KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.itext

Size

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.data

Size

Virtual Size

19KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.bss

Size

Virtual Size

26KB

Characteristics

IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.idata

Size

Virtual Size

3KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.didata

Size

Virtual Size

490B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.edata

Size

Virtual Size

676B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.rdata

Size

Virtual Size

69B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.Cc8

Size

Virtual Size

4.5MB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.",=

Size

1KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.Ime

Size

8.0MB

Virtual Size

8.0MB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.reloc

Size

1KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.rsrc

Size

3KB

Virtual Size

2KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

bin/NsImgLdr.dll

IMPHASH abaf983d68f2a272929e27030410d98d
SHA256 69555880b83878176858dcbc3ab00d661b807597b619d7560a7125032ed62a1e
MD5 cfef8d806d989363c2099b7df948c54e
SHA1 723f2a414fa193df62a32b14607597a50c530f70
SHA512 9581c0ac8ef5972f908bd41b27daae240cfc0c5aec262279bd0c680b57c157661fac436bfc8847363ba3ba3e95e6307f5dfb22dedb3890a9d08fde6f5970ac3c
SSDEEP 49152:H9Chbah9wK9en5gz7x9ItW8jPAKFzxe3ZiLk/HqpDDTxB/cIH21GRlKmpXQ:l+CUtW6xMILiqpDM1slKm
MD5 SHA1 SHA512 SSDEEP

windows:6 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

6

Entry point

1822876

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

E:\NSOCR\NsImgLdr\Release\NsImgLdr.pdb

kernel32

WideCharToMultiByte SetEndOfFile WriteConsoleW GetProcessHeap SetEnvironmentVariableW FreeEnvironmentStringsW GetEnvironmentStringsW GetModuleFileNameW LoadLibraryA GetCurrentDirectoryW SetCurrentDirectoryW GetProcAddress FreeLibrary ExitProcess CreateFileA GetFileSizeEx CloseHandle MapViewOfFile UnmapViewOfFile CreateFileMappingA DebugBreak DeleteFileA GetTempPathA GetTempFileNameA EnterCriticalSection LeaveCriticalSection InitializeCriticalSectionAndSpinCount DeleteCriticalSection SetEvent ResetEvent WaitForSingleObjectEx CreateEventW GetModuleHandleW IsProcessorFeaturePresent UnhandledExceptionFilter SetUnhandledExceptionFilter GetCurrentProcess TerminateProcess QueryPerformanceCounter GetCurrentProcessId GetCurrentThreadId GetSystemTimeAsFileTime InitializeSListHead IsDebuggerPresent GetStartupInfoW InitializeCriticalSectionEx EncodePointer DecodePointer MultiByteToWideChar LCMapStringEx GetStringTypeW GetCPInfo RtlUnwind RaiseException InterlockedFlushSList GetLastError SetLastError TlsAlloc TlsGetValue TlsSetValue TlsFree LoadLibraryExW ReadFile FindClose FindFirstFileExW FindNextFileW SystemTimeToTzSpecificLocalTime FileTimeToSystemTime GetModuleHandleExW CreateFileW GetDriveTypeW GetFileInformationByHandle GetFileType PeekNamedPipe SetFilePointerEx GetConsoleMode ReadConsoleW GetStdHandle HeapFree WriteFile GetConsoleCP HeapAlloc CompareStringW LCMapStringW GetLocaleInfoW IsValidLocale GetUserDefaultLCID EnumSystemLocalesW HeapReAlloc HeapSize DeleteFileW MoveFileExW FlushFileBuffers GetFullPathNameW SetStdHandle GetTimeZoneInformation IsValidCodePage GetACP GetOEMCP GetCommandLineA GetCommandLineW

ws2_32

htons htonl ntohl ntohs

bin/NsSpell.dll

IMPHASH 8053a7d12c214bceeb2cb723a962bce0
SHA256 3db372fc7a15d3c4b0f4509685832fff1523004f42150f1a15ff86fe48096e80
MD5 8f50f83e4fc8299ca6762b12a9d285bd
SHA1 4b397981ab621f5b8dbe19053a89aef4a47d057f
SHA512 18cd2507bfdab6bf658df5c535f5581f76d82fa104a96693afea9989a6956bb353fc73af247ea5286de51739ef17b2680f5366bc3725fe0edb9aba26449656f2
SSDEEP 6144:1CnnCgCB7hZo2VYj5oArDY4enC22FAPsByy1zyX2IST20SPhy7j:1iTCB7hZo2VYPDY4RXFAPsByypqSFl7j
MD5 SHA1 SHA512 SSDEEP

windows:6 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

6

Entry point

74453

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

E:\NSOCR\NsSpell\Release\NsSpell.pdb

bin/PL.lng

SHA256 441521ad6f04ab8dbc846dffb620af9f890228019ffc58e16b45c513fd46efbb
MD5 f194392b666a80957f28e4abeb594283
SHA1 a8c8618b3b6f688e15191af3a447df5782a4c996
SHA512 f262ce0e0f846b8e2d70d3ebc4cd28e68dd61bb905c0b49abd5a3a2baedbb354250ab37ba6587774adb981eadf66d4fef6390f5dd474e2091d7a8eb1621ca9b1
SSDEEP 24576:kSsMfQtG5Vb9w5rMJiI3kiKY/mVusfLChSbJYyEuCJ/9sOT:1s7tDnYeVLLChSbJqJz
MD5 SHA1 SHA512 SSDEEP

bin/PT.lng

SHA256 d294bb4ae58a2956e630f1debc0e4ad78da4902887b9483eaec47b15ed8cc69c
MD5 ae2a6a12f3ac8ced0b27e6d963ebac75
SHA1 2d73be5bc3c44c2d740a169d30b6e708c71d4597
SHA512 f3d1a32d9b4c902d6614b7e9c84bb6b618fa0ba0ad76fe45cd1a4e6303d8eb44d6bfb9da46c24ad023d7fab11af1ce855408a300c01c336f5088848b7a7b361c
SSDEEP 24576:41d3SiBwdJGOCYr1VIfKvoiIXvUTpXPNca2wriwKd6pWSgZWZsDKjRmlYZfF:41diHlCy1VIAoiIwLlw6pXgZWZsj0t
MD5 SHA1 SHA512 SSDEEP

bin/RO.lng

SHA256 3ebe49b1191b32b01b8d42d9bae1e74848d7ef44ba09322f6b8efddaefcb7ff8
MD5 c9b5ab6f9d6406c1ff73c96d12fed1f4
SHA1 4d408b06edbde1d7339492745824fe589373b711
SHA512 7284d36b53ee713ee13a8d565f2780a6eb863ab2c1a33c80cdf6664beeed5e49fc5223ef5cef4549fd24c30080cdfea666474f2e6f2917507ca4b327718d020d
SSDEEP 12288:i6E3nu2/TYt0HThtucezy76m2HhhKonlpuAJeIt5Hl:q3u2/3H9gfy76m8hhKquA5Hl
MD5 SHA1 SHA512 SSDEEP

bin/RU.lng

SHA256 c951c7f829592d32176066059e6d9e068930970ec9f6ce06e91df5609d3f8efe
MD5 e9e04b699d2fe2045a1ddf6eeda9a0b8
SHA1 875d84f7a2be3b795c53decee6c4cd7bc82f6333
SHA512 d6e836a2b26e61fb578b2cced7a4dd0f2cf4b4e221c57e0ecf3cb7b971d2bfd26cb5bf48fd6a24272a870cc22ae32f877877b5291b2f4e8ad36a553c23813d6d
SSDEEP 24576:E4Omck7RiF5q+qZb957nwWEOx2I+NmsqkvKokwt:E46oUF7wnJEi2I+N3qiKrwt
MD5 SHA1 SHA512 SSDEEP

bin/SK.lng

SHA256 babfa08bc21d26f001802b3b5f04b18b7db61dcf9238d32bd9b284fa5adf821a
MD5 82802bf4a536e81e20d632468d1c1baa
SHA1 abf0d528b604c127c9f08d565fb23769c9e12229
SHA512 586e5db5bb2f8f73ea2274748fe45c96957955b8d7769fba542ce280cd08b678573462e2db8e1c96701940bdceba979fbccad2652c0a3950a2c794c0e149f8d8
SSDEEP 12288:xUv7KLlvmVkZcjjtzCei3xab21obwwuP7S2qQezn196AkRToRcOWwx/bU9Jz9:LBvmmZcj1Ce0s61SZgOuFToOwx/bUr9
MD5 SHA1 SHA512 SSDEEP

bin/SL.lng

SHA256 c923130ffea404803c2f58a75999b14952d5208514bdccfb58ee84c3fe0e2274
MD5 81dfa929a157d203a0492b3ace08cdc6
SHA1 c175a2615ee45de63b240becc2c2ffd1aba52fda
SHA512 850d8f6409a8e4d500f884a1c5412b12c96fdfcdfca14fa7cd4e2dd5375b67d595ad473dee1da442665a5e14f10ffa4da9ef95a9efa2db463f8057d3a40f6cd5
SSDEEP 24576:chZyHJvRfa2uRk2HfdUyCGaM9XeaxoRgCgHd:chwvRC97/dUybaCeoCgx
MD5 SHA1 SHA512 SSDEEP

bin/SV.lng

SHA256 9fea1859c2b0e38d43eede5ed42a417f50494add06f36eb3da8fc6efed307208
MD5 5a13a4e60acc469fbede28894380d351
SHA1 e6dd1026f13331b96f03c7611e54e6c3f24f31ef
SHA512 b9122aeb3dfaa30d1f80124ecaa928d6f8ace9bd64ef627ea53810fbb757c16d6c93df089647af049fedb96a3e3844f768b868a62ff07f5d7682b641d4a74745
SSDEEP 6144:5LRkBzis01xzIPvxjpP6crnpROkf6gcgVWWoD+K4Kn0vUzXMS9JX+bs:5LmBWs8mvxj0KR/pvWWU+Kn0cDHX+A
MD5 SHA1 SHA512 SSDEEP

bin/TR.lng

SHA256 d88ed5d4511e0a9ee63627d175a381dfd209c11c47ab8bb2ccaa6856d6114986
MD5 f67922a54215a6b1d7df7d3fc6f1610c
SHA1 6ea3a8af9df5a37884c1efababa01daee7b4f723
SHA512 00d5e3593d15ba30a31bc7d29fb314417e2d92a8c2195b2163747d6cb7e6bc39fa9479829febd195fcf59e475323b187025d1b0c31f0367a40b8820b8c2bba57
SSDEEP 24576:XG5rwNzv4F/PW2fLxcVz8xn2YWP90+rhYD0XdqfeuZua2ZFZQpp8k2kbwP:6wNs9e2Tkz8x2PDo0yhuJZFECxks
MD5 SHA1 SHA512 SSDEEP

bin/Twaindsm.dll

IMPHASH bf4602f11b8e8bdeb01899d2a942ed66
SHA256 ba747e28769d85458a33a61a2a230435612e376f99b9a2dc104a817e2d451bfa
MD5 569eb253765f2b0854f26a1d7a0191bc
SHA1 40c724c1622978e3df98b4cad5e8475a79fc89eb
SHA512 5be9e30eb40118386b643235e70873f86bc6266b5f61d12ed118d6b8a476643cbfd85b288f2c680782c5a26342792514b0a9c7e53c1020c2b972751c90fa6f13
SSDEEP 1536:/ZXCPRnHmPdKh2u9HAZ2H734pkGc239Y2/kyhrp0RW9m5waX6PF15s14dyw2r:/ZyRHmP8AudAZ2H74+2ROayXEF15LdyT
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

PE Signature issue

Digest

42:04:88:c8:85:23:c5:7f:5e:5b:88:02:72:12:d5:33:fa:a0:8c:c2

Digest Algorithm

sha1

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=The TWAIN Working Group,OU=Digital ID Class 3 - Microsoft Software Validation v2,O=The TWAIN Working Group,L=Aptos,ST=California,C=US

Chains

Dec 13, 2013

Subject

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Serial Number

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Dec 21, 2012 - Dec 30, 2020

Subject

CN=Symantec Time Stamping Services Signer - G4,O=Symantec Corporation,C=US

Serial Number

0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50

Issuer

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Oct 18, 2012 - Dec 29, 2020

Subject

Serial Number

18:da:d1:9e:26:7d:e8:bb:4a:21:58:cd:cc:6b:3b:4a

Issuer

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Timespan

Nov 8, 2006 - Jul 16, 2036

Subject

CN=The TWAIN Working Group,OU=Digital ID Class 3 - Microsoft Software Validation v2,O=The TWAIN Working Group,L=Aptos,ST=California,C=US

Serial Number

1a:dc:00:63:5a:4a:af:9c:e5:0f:3b:e1:32:83:72:a6

Issuer

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Jul 6, 2011 - Jul 8, 2014

Subject

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Serial Number

52:00:e5:aa:25:56:fc:1a:86:ed:96:c9:d4:4b:33:c7

Issuer

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageClientAuth, ExtKeyUsageCodeSigning

Timespan

Feb 8, 2010 - Feb 7, 2020

Minor OS version

0

Major OS version

5

Entry point

51736

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

d:\D\wrk\TWAIN_DSM\visual_studio\Release08_32\TWAINDSM.pdb

kernel32

GlobalFree GlobalLock GlobalUnlock VirtualProtect VirtualQuery IsBadReadPtr FreeLibrary GetModuleHandleA LoadLibraryExA SetLastError GetLastError LoadLibraryA GetEnvironmentVariableA GetCurrentThreadId GlobalAlloc ReadFile GetProcessHeap SetEndOfFile CreateFileA WriteConsoleW GetConsoleOutputCP WriteConsoleA SetStdHandle MultiByteToWideChar GetUserDefaultLangID GetProcAddress FindFirstFileA FindNextFileA FindClose GetLocalTime GetWindowsDirectoryA RtlUnwind HeapReAlloc HeapAlloc HeapFree SetEnvironmentVariableA GetCurrentDirectoryA SetCurrentDirectoryA GetDriveTypeA GetFullPathNameA EnterCriticalSection LeaveCriticalSection GetCommandLineA RaiseException GetModuleHandleW TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement InterlockedDecrement TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent DeleteCriticalSection HeapCreate HeapDestroy VirtualFree VirtualAlloc Sleep GetCPInfo GetACP GetOEMCP IsValidCodePage CloseHandle WriteFile WideCharToMultiByte GetConsoleCP GetConsoleMode FlushFileBuffers SetHandleCount GetStdHandle GetFileType GetStartupInfoA ExitProcess GetModuleFileNameA FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW GetEnvironmentStringsW QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime HeapSize InitializeCriticalSectionAndSpinCount SetFilePointer LCMapStringA LCMapStringW GetStringTypeA GetStringTypeW GetLocaleInfoA

user32

DialogBoxParamW EnumChildWindows SetWindowTextW GetDlgItem EnableWindow GetClientRect GetWindowRect ClientToScreen MoveWindow EndDialog SendMessageA MessageBoxA PostMessageA

gdi32

CreateFontIndirectA

advapi32

RegQueryValueExA RegCreateKeyExA RegSetValueExA RegCloseKey RegOpenKeyExA

bin/gray.icc

SHA256 e178916f7256d890e9d4ec3f016f69fd7003c3fc980ed13325cf27e3c0524e45
MD5 355b5dfa34aa3038d642c562e81bd500
SHA1 a41e82dbfeda048a360de21af1a70f22502f8339
SHA512 125a012edb0457c39b471bee0c78466723450fa728fcd9fa9a6e1fe6df1f09ff0da7ea7eca7c0f553b131509a89c33cf4dfdc414236eaec1ef054960eafb9ee5
MD5 SHA1 SHA512

bin/jnsocr.dll

IMPHASH a1fddcfa0d53e9bdced4474042d654bd
SHA256 a6f4ca3991c49eaf52ce54e9a325292a005526f836ba99291c1527a21204b7f9
MD5 e1cafd43dae38aba094c866f45f749a2
SHA1 1baa610fb9bb4f0841ccc0ec845a263cbc05904c
SHA512 6bca34499a0e5f20c9a05b784607c3009216a729084e4d2b277bc093a411e475f5b3a574d82b74ecb4c12e85ba87010182c54659587ac37b83cbbe66023df973
SSDEEP 1536:iw8o51Au7UTqbVw2ODTiGSMsab7navY9D1Nk/nm7n5weOgnEM0rI:ixoM8bVyawdTZ5weBzm
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

1

Major OS version

5

Entry point

26651

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

E:\NSOCR\Project\Sample Projects\Java\JNSOCR\Release\JNSOCR.pdb

_Java_NSOCR_Engine_Blk_1GetBackgroundColor@12 _Java_NSOCR_Engine_Blk_1GetBarcodeCnt@12 _Java_NSOCR_Engine_Blk_1GetBarcodeRect@32 _Java_NSOCR_Engine_Blk_1GetBarcodeText@20 _Java_NSOCR_Engine_Blk_1GetBarcodeType@16 _Java_NSOCR_Engine_Blk_1GetCharCnt@20 _Java_NSOCR_Engine_Blk_1GetCharQual@28 _Java_NSOCR_Engine_Blk_1GetCharRect@40 _Java_NSOCR_Engine_Blk_1GetCharText@32 _Java_NSOCR_Engine_Blk_1GetLineCnt@12 _Java_NSOCR_Engine_Blk_1GetLineText@20 _Java_NSOCR_Engine_Blk_1GetRect@28 _Java_NSOCR_Engine_Blk_1GetText@20 _Java_NSOCR_Engine_Blk_1GetTextRect@36 _Java_NSOCR_Engine_Blk_1GetType@12 _Java_NSOCR_Engine_Blk_1GetWordCnt@16 _Java_NSOCR_Engine_Blk_1GetWordFontColor@20 _Java_NSOCR_Engine_Blk_1GetWordFontSize@20 _Java_NSOCR_Engine_Blk_1GetWordFontStyle@20 _Java_NSOCR_Engine_Blk_1GetWordQual@20 _Java_NSOCR_Engine_Blk_1GetWordText@24 _Java_NSOCR_Engine_Blk_1Inversion@16 _Java_NSOCR_Engine_Blk_1IsWordInDictionary@20 _Java_NSOCR_Engine_Blk_1Mirror@16 _Java_NSOCR_Engine_Blk_1Rotation@16 _Java_NSOCR_Engine_Blk_1SetRect@28 _Java_NSOCR_Engine_Blk_1SetType@16 _Java_NSOCR_Engine_Blk_1SetWordRegEx@28 _Java_NSOCR_Engine_Blk_1SetWordText@24 _Java_NSOCR_Engine_Cfg_1Create@12 _Java_NSOCR_Engine_Cfg_1DeleteOption@20 _Java_NSOCR_Engine_Cfg_1Destroy@12 _Java_NSOCR_Engine_Cfg_1GetOption@24 _Java_NSOCR_Engine_Cfg_1LoadOptions@16 _Java_NSOCR_Engine_Cfg_1LoadOptionsFromString@16 _Java_NSOCR_Engine_Cfg_1SaveOptions@16 _Java_NSOCR_Engine_Cfg_1SaveOptionsToString@16 _Java_NSOCR_Engine_Cfg_1SetOption@24 _Java_NSOCR_Engine_Engine_1GetVersion@12 _Java_NSOCR_Engine_Engine_1Initialize@8 _Java_NSOCR_Engine_Engine_1InitializeAdvanced@20 _Java_NSOCR_Engine_Engine_1SetDataDirectory@12 _Java_NSOCR_Engine_Engine_1SetLicenseKey@12 _Java_NSOCR_Engine_Engine_1Uninitialize@8 _Java_NSOCR_Engine_Img_1AddBlock@32 _Java_NSOCR_Engine_Img_1CalcPointPosition@24 _Java_NSOCR_Engine_Img_1CopyCurrentPage@20 _Java_NSOCR_Engine_Img_1Create@16 _Java_NSOCR_Engine_Img_1DeleteAllBlocks@12 _Java_NSOCR_Engine_Img_1DeleteBlock@16 _Java_NSOCR_Engine_Img_1Destroy@12 _Java_NSOCR_Engine_Img_1GetBlock@20 _Java_NSOCR_Engine_Img_1GetBlockCnt@12 _Java_NSOCR_Engine_Img_1GetBmpData@28 _Java_NSOCR_Engine_Img_1GetImgText@20 _Java_NSOCR_Engine_Img_1GetPageCount@12 _Java_NSOCR_Engine_Img_1GetPixLine@36 _Java_NSOCR_Engine_Img_1GetPixLineCnt@12 _Java_NSOCR_Engine_Img_1GetProperty@16 _Java_NSOCR_Engine_Img_1GetScaleFactor@12 _Java_NSOCR_Engine_Img_1GetSize@20 _Java_NSOCR_Engine_Img_1GetSkewAngle@12 _Java_NSOCR_Engine_Img_1LoadBlocks@16 _Java_NSOCR_Engine_Img_1LoadBmpData@28 _Java_NSOCR_Engine_Img_1LoadFile@16 _Java_NSOCR_Engine_Img_1LoadFromMemory@20 _Java_NSOCR_Engine_Img_1OCR@24 _Java_NSOCR_Engine_Img_1SaveBlocks@16 _Java_NSOCR_Engine_Img_1SaveToFile@24 _Java_NSOCR_Engine_Img_1SaveToMemory@24 _Java_NSOCR_Engine_Img_1SetPage@16 _Java_NSOCR_Engine_Img_1Unload@12 _Java_NSOCR_Engine_IsDllLoaded@8 _Java_NSOCR_Engine_Ocr_1Create@16 _Java_NSOCR_Engine_Ocr_1Destroy@12 _Java_NSOCR_Engine_Ocr_1ProcessPages@32 _Java_NSOCR_Engine_Scan_1Create@16 _Java_NSOCR_Engine_Scan_1Destroy@12 _Java_NSOCR_Engine_Scan_1Enumerate@20 _Java_NSOCR_Engine_Scan_1ScanToFile@24 _Java_NSOCR_Engine_Scan_1ScanToImg@24 _Java_NSOCR_Engine_Svr_1AddPage@20 _Java_NSOCR_Engine_Svr_1Create@20 _Java_NSOCR_Engine_Svr_1Destroy@12 _Java_NSOCR_Engine_Svr_1GetText@20 _Java_NSOCR_Engine_Svr_1NewDocument@12 _Java_NSOCR_Engine_Svr_1SaveToFile@16 _Java_NSOCR_Engine_Svr_1SaveToMemory@16 _Java_NSOCR_Engine_Svr_1SetDocumentInfo@20

bin/pdf_font.ttf

SHA256 d25621bdfe576beac16d8ff93b8b599c27235a1acf0a7c052da8f827bc172a57
MD5 a8b6a4f6c3f5fc88e74cfaf8fa73da02
SHA1 cf046969672009f07dfc03536647aad128e07d2a
SHA512 b3b6c9aaa8cf9561227478d70c199a2e762a3f34abcce34d1b30ee5ad161bb74b5e95f7ccc4107b64aad3458bf76fcba62a85d4e420dac14f929ec0815898e5d
SSDEEP 6144:zqjOa01RNSqzs+a6qGWph8s1OEYbuuFzi:zY01PSqzs+aFGWsrHBm
MD5 SHA1 SHA512 SSDEEP

bin/rgb.icc

SHA256 304f569a83c1e5eddaddac54e99ed03339333db013738bb499ab64f049887e28
MD5 dea88382d899d5f6e573b432473ae138
SHA1 806e8561209515151f477f2c7a6bd2b1a00bb63c
SHA512 1dd957ef51787f9753f94c24ae3eb4edb0bb120d144a9e36b812ac3d4ba7e292a3469fd2a510c67e4ea54142b1d9bad6d5ef133c04a4b72b6ba8be694edc63d7
MD5 SHA1 SHA512

bin/sd.dat

SHA256 a1e806c79fa764cb481aa8bba5bca7f503c9f3711bf380503d588b0d6eccbd63
MD5 ae556c1ba47966f102128bbae8c217f8
SHA1 e0c7e29c400eefffdd493cb03e97b776b1b2d717
SHA512 78eef37e4199dd34d560a5964d2fef14a2ce360692319661a7d155ffba87e32291715299a8e1592ff211ea3eb44a3f5f53ee918d8a3853727fec941210654cef
SSDEEP 384:cqoAGrn4CzOJqkSE1CFehNASNmhvsoFxKoV6dZuvl1Xk0dq0C0DqdAh4Y1ir8uJ/:nAr3cHSE1g4fNVMUoV6nuN1Xk8lCPEK3
MD5 SHA1 SHA512 SSDEEP

br.ini

SHA256 927407a26dbf7c53ed0bc7820331d0ed1dff38f9261b58539a128cac2fe7ee16
MD5 6be6e68c10fc9903c2628f073610a461
SHA1 6b5e40d191fb59df666b9ba197b826fb89166273
SHA512 3a344c8c6e65bc82770e27acff85e7d06ddc904c9c532251f39beff1df694d54baf23717ae719d44e4ea9838bc159024aee141c9deb1904e9f7a057136eec857
SSDEEP 96:M/xiXLcL2RSbTZugNdjwFpP2ckGV5Au4CYclgtVNdF40AAfM5j:M/x6Ls1XZugNdjw/zkGVZbgHNL40FMR
MD5 SHA1 SHA512 SSDEEP

bugreport.txt

SHA256 f24295d8067da702f8dcae5984761719ee78af25bbc09e7b15a53ffa4dfd9b96
MD5 6c7b2e02464d95b3c39851b73f21fbd5
SHA1 4e4cb41711873fa6386105b6aa8387172cf5ca48
SHA512 5088e7e91cd82345b08972739d6a127a12410fc7fcc034cbad9571c8f4a3cda6f2676bf634bae10ff2eac19ee183b850193068f5c16668a7b48982ac1cc11aed
SSDEEP 384:6VTryYcTMmU6ATwxKA9AYw599WdYfj/2PGnV4LD8qZdzBex4pWuGYBVzdrQJmdyy:WyTVUzKKdL599WdYfj/2PGnV4LD8qZd9
MD5 SHA1 SHA512 SSDEEP

cz.ini

SHA256 997b09ba7c384341d695afe9434b01dbbf2626a72342b186b2813234a1091d34
MD5 8cfb8a9cda22f76c644f51401621e1e3
SHA1 ae180c7485ac64c5576f8db09c30a10477dd9880
SHA512 06e4e7c39d7ab464c4253ed807c2ec6d5fea478906ef790022d3be527b14f7868c926b23bae02c1d35784f35ab5f0852c83cdae874c7ac4fa5faf9009c3907f3
SSDEEP 384:d/gC7XIyKHHI5wSk7EVuw9yLOafMgtvFguVkSxuJdnsfiULarGJH+tSg7KVcuS9z:dZVT5wSk7EVuw9yLOafMgtvFguVkSxuV
MD5 SHA1 SHA512 SSDEEP

de.ini

SHA256 9af7a22185117967727fe19c3db45e96c14cda3b0607eb576d3d9cca0de9f689
MD5 7b1d0579348444cc11fb1cc3fbf00514
SHA1 4fb011cd891f7570573579cdc04dc1038b3a5563
SHA512 3cd89c0e3c43ab71852041ddc962a215fe411e7728989ba20481b7efe598aec3296c3174fdcd63c6908744800d784258e9195e27f7614cdb70131aa8db502880
SSDEEP 384:ws1yTjC3CF+MowfTh5Q5+xytaoyoVdF0c3YkH1K9zRvoJlPDJM36DOTiyQLfUMpi:ws1yTjC3CMMowfTh5Q5+xytaoyoVdF07
MD5 SHA1 SHA512 SSDEEP

en.ini

SHA256 a11083ee812b6cc9a0e93ce75856ca16802024c3a13618a2f6c4859cdefa58b5
MD5 4ee840e71054942e6a2f28448c690d60
SHA1 13a4e387358245952320cbbb478295d4c047ba07
SHA512 b8ac3bb249e6de012f54b772fc75c459a7b15afdab571e93a740a7a0b0f4d402d9210e26e7e472bbe7b982858edbb7f832194d9d62b3ae230ac6e9eea4ba963b
SSDEEP 384:A4O741V9rAFpiawkTaI3UXuDUOvPQdSlkK8E+PNCuC5HNOMrVqKghKZgXtmbB3:A4O741V9rAriawkTaI3UXuDUOvPQdSlR
MD5 SHA1 SHA512 SSDEEP

es.ini

SHA256 9d29424a2149b1ae62737884bfc718ecf29dc42b6198aa4fdab3b5c6e5371c1d
MD5 2b39c0db41c81ce91a78af4b32be9a00
SHA1 e87e8132c88b9ee6df151c13a42059b01299c360
SHA512 6613ad2ab8a49d89d88bfb001690130d8c63e9dc1f9303184e17dce6c99ae33d2227e78455b72ddd17454a6779c0d213bfbaf27b12994e80e14f1cdec247491b
SSDEEP 384:rFnhQnFpiawkTaI3UXuDUOvPQdSlkK8E+aoP+8tK16gVMwMzz5Pp:rFhQnriawkTaI3UXuDUOvPQdSlkK8E+1
MD5 SHA1 SHA512 SSDEEP

fr.ini

SHA256 0a107fa52e1879caa575a32d17d1c783ec303ca1b4bdbfd81dc8427470232acd
MD5 983bc271ad568917d311e0f16599e98e
SHA1 c143bc7191d9818ef9eab41ba8b3f0688908e856
SHA512 fe9edcfbb893e3f666933ef8b44576e60eea81653b3c5fdb958dd5e95c2b01093a8b07e19f20ad0b6499b53ca5a577759f757568bf207aee87f842bfe2dcf59e
SSDEEP 96:qFJaVcX0KXMDSg+Qmdh6+VyfkPn7Gm9ca5QK3cLCuYFad2UU4Vu:qFJa9KMe0m2+AkPn6m9cLK3haMz4Vu
MD5 SHA1 SHA512 SSDEEP

gr.ini

SHA256 ec0472b7517909f4a8c0c77120bfb87f56b41cc56efa0e0f41ce2cc09388acd1
MD5 0b3477ee104d01fd0f9d112ed025ae1a
SHA1 f1fd45ad4a585e59f42eef3d604e7b2165e787b2
SHA512 11338993a13bb3650eb66ea007dc48c7044ec88b3f64ba37f8035ab40bd9417f067a7dc2ab5488fa8e4f0035fabbc6c80d065a73c396dfd728128757d67f62fa
SSDEEP 384:9jOINyJSQNFkcjl9f+V2ZzvdXnEeH9ycr62Iu+oMhxiSshytfzk4iYEJdlmbBZ:ZNyJFNFkcjl9f+V2ZzvdXnEeH9ycXN+N
MD5 SHA1 SHA512 SSDEEP

hu.ini

SHA256 225e81e94508ef1c5b961d56bcb1bdd0bfadfdb94164d48d73f85a606a768462
MD5 9e2d52b97c65e61cf0c8e8bb3e420394
SHA1 eea01df80da9ea3ee8ca596552e230d8716c8422
SHA512 1f25925e65cdea2aaebb2e8ba11214809a67d63b01fbf7fa17f18d51bfd87ce5cb92cfd5cfffe7b55bdf6eea2955b295f6e410d16269fe2638be98225ce88b50
SSDEEP 384:YJKLtAFXgjSiYcUhXlL50keLjoKOi0WJNrWYp86WTR2NkPdCUhsH9/CEKpsAmbB3:YJKeFgjSiYcUhXlL50keLjoKOi0WJNrt
MD5 SHA1 SHA512 SSDEEP

iframe/rolloutfile.tv0.0.tv

SHA256 c74305cdde258caf6441a7281ade0cac79b0738078556d68b2e0a2b2d0cbf083
MD5 4761026b9fc398f96beb958be70fcafb
SHA1 999e26c620d6712879aa9f6c8f16bef65025314d
SHA512 984663db6e671a455bca4ff8ce0fe0ff50452d6f7af9866adbba8cef64b526107dcb890f4391328ac16d358bf42864162fbd8cc4ec3312a8cf69ea0a67bb54ff
SSDEEP 3072:pl5+u55KrHjFmK5k0GJ/AaJGn2hMA2XksW0ZD:pmu55YFm2BxXBW0ZD
MD5 SHA1 SHA512 SSDEEP

iframe/rolloutfile.tv0.1.tv

SHA256 0385a3b8c37e8067f08f5e0b7668f43e4cc424f0a4efd4df9b8d87513bbe280b
MD5 84afc7c45e3e47fba1adaabcb80a0482
SHA1 4b352945ed3fc06f7ceb872804991f0116a23849
SHA512 638b5ae944b0789e9312cf105cf44575ebb03b5095c22861a44653d76620401e264ba3c8c5909e5504b1f577354596725c4c42503d5b859cfdcd72171024ca87
SSDEEP 768:37wQIfIlB9GEFNpdRJTp0b9eUWfysCCsfSUI1mk8x1lq+wde2vta:30QZlDDbHi9ddvCsfSUIwlqHjvta
MD5 SHA1 SHA512 SSDEEP

iframe/rolloutfile.tv0.2.tv

SHA256 087a713b9d1efcb95895aba2c4e299c18d3f4fc1b5f9f34df89e5753b8ad37a1
MD5 30640525b522ae9fa76e117069e18dd2
SHA1 cfd2a20f122aa4d8db97790312c8a70440d56380
SHA512 c205a5542912e60cd784a541d2e72127c363803e6a4230dc9dc7175603bb8d644613685f8de8d1d1306f18b9f8a8952c0e6920a75069639b866bd1b811bc9de3
SSDEEP 768:/TpOpTQgrhCfn1EcWW+AlCOeRpHs3nkpASKg0YnFRg6iqmqdr9l0MhZyvirqZeKg:r4TtrgfnWcWWs5Rg6iq/FD0Croel
MD5 SHA1 SHA512 SSDEEP

iframe/rolloutfile.tv1.1.tv

SHA256 cf067f8e084eb249dd7a1a0e693a3ca8c87a633b0d76d360927a6ad684f4c1ca
MD5 de6ebf4d0206d2e0eb404df38e0f26b8
SHA1 e0bdbdf9b58e3191b4b998dbde017c192af1a5a7
SHA512 46e7e95aeddb70500729f845025cf6b9ceed43687a778595815a0bc8594f5f9d11eda539097edf67d9535289e60c0c1a33c9ef2721f06c710d94a050290a37ed
SSDEEP 768:8ULrjUmFoGfI8zd3LXthDHkjuuh4rxWCNddS7hKgJ6uQRTXCNjWMBqLRc68A/Ai:ZL/UZ85bXX7Sut1Na7MmmRTyNjWMgAi
MD5 SHA1 SHA512 SSDEEP

iframe/rolloutfile.tv1.2.tv

SHA256 95597de55afbd0f8d90c5a08c59acc1d706072ff530c2cbb0a65ffd5f118f445
MD5 4ef953a58e37a3ffb280670dfd0c22d4
SHA1 dff929333d0d8002ded3233392d5584a1d3d17d2
SHA512 0cb6c8ebbb5a5663ac193cebf04df957a75e835175844aca118d905c04e70a13cd9c24ee1957111680bee34771c477599fd6de541fa6d3006861732ece94b744
SSDEEP 384:AI+RhhJ6wTHwFZwgAyVwel9wocL7i4XwLUDgmD:+/hJxTQFSgAyweL2L7irLUDgM
MD5 SHA1 SHA512 SSDEEP

iframe/rolloutfile.tv1.3.tv

SHA256 a6a96febce0f436d20b1688e62994526d0a5b339b2875412b39f69d8e7ae1007
MD5 8835e31d779238d54bd990022352c91c
SHA1 9bee3f5711b86c6c3a7d57ee0f338eb255c12679
SHA512 f3c5bfd7b2f7fd79914bd2d29943f418390bb0c480ecb1b414e6e6a05be9fcbb06335807ebe48326bf78be2aa1a9e8d11193d136c88367e068982e053ef6fbb6
SSDEEP 768:mX8M02mY/2a1VVO2hJ/mMFSuOkxB94AL3d4LeeNjQ8hazC+da6LVg+TQNg2ir:mX02Zua1VE2hpmMz9x4ALKSL8gzfdaYv
MD5 SHA1 SHA512 SSDEEP

iframe/rolloutfile.tv10.0.tv

SHA256 3bc86a9f25b39b32c8bd0c3ecdb75d7464eed38ec1c4d1fb2e018833808166fe
MD5 61c35ffc68acf18a4056fc8b707cb1dc
SHA1 3b2a8deb5084fad1b2075e00b6fc199b1aef3f92
SHA512 8e4d7248b588b048c85162bad2baa0e7895e0c2ba26abdb9c7aafcf617dde0d3b9099c4987dd243629067c557462f9d50e994e2ab0a65d57f0ce6537897c8240
SSDEEP 1536:BW6DJuqaivWvVDmclalMt5ZmrytlQ5epzmje:oOwUQaclauXmWTQIpzmS
MD5 SHA1 SHA512 SSDEEP

iframe/rolloutfile.tv10.1.tv

SHA256 d096667f2c75e1f8a482b6c5b931fb26e4d0766ecfcf4ccf3a4784dbb0de2652
MD5 4671437b90aa9083ab0c7714202da250
SHA1 a1575ef2cc845ae01d736e47c8ca39b1bf9950f2
SHA512 7dfbb5b1dfdb7247ca7fa4c7cec0e72937afe047b30232ef67867c651fe4ec5b7f40815cb20278748b0de1c8a8cdfba6a770aaab670efa55812c37591a9328d7
SSDEEP 384:BW6NScOdaXtn9D057uQSxQFNpvUTZjBQMe6uHNiqbLVSTTuJAL4+465H7q/7s:BW6N9YMtn9JQOQdkXutdbLAT6gq/A
MD5 SHA1 SHA512 SSDEEP

iframe/rolloutfile.tv11.0.tv

SHA256 6974524ac38884270048c2bb38149e5ca4d1b5bc06095f3f6d4e54f8c6505488
MD5 6285b3021cc8c942560d5c1b38b644e4
SHA1 64b7e08c53f7c1c2c69d5174d36ba413a7a9a0a1
SHA512 5502994f16a156a284a655941ec07e0ddb2acd9a6f48a594a8c707729a7d341268481340be345ba23b548ef852f9d0be4435a8454f6dab377f7441a1af22792a
SSDEEP 1536:BW6I+bzSjHExzs8X06+H2ee6g5REAbEYn/2z5pAnKrX4hGuaOe8XnYy9z+4jtj:oHoSTENsrH2b/Ma2zvMKsaOfn5xj
MD5 SHA1 SHA512 SSDEEP

iframe/rolloutfile.tv11.1.tv

SHA256 4f3dd79de493f3d972460d01adece68c6bcc98e5292182a06a09074eb54f7d25
MD5 38cf6dafc9adfe11a3cc73811bf0abad
SHA1 12134632ffee4102e512f80a01a8506d11a99d9d
SHA512 c14b5eadea680ea8f30284279fb662884da7f7fbe8336b85bcb790e993b1158c3d7fe400017fd38e53e173d4a887c82a385e39bdee326ebb2cfb16860b8451b6
SSDEEP 384:BW6NI9UNJLUtfbSfuLrEUYgVErSPJTDkcRnmqQE7qXfPyiBdJRrRjL7F/gffdiHy:BW6Np79fQgUYUEsJ1sRR1Nei2yaij7q
MD5 SHA1 SHA512 SSDEEP

iframe/rolloutfile.tv12.0.tv

SHA256 b3e754a3787d2b93d27c0c8de8600f1e7fdcf97c070c2cd38f83b956655f1aba
MD5 622c5f92c322740f9e4d3a7ccdc46fc5
SHA1 bf4b293895080cb80d15d7a0a0d4ea41fba31820
SHA512 a6b4f55815e6a64ca05c21c4c401795d1798aa7c898791d898d538e7fab13418173a40d05402b5b82b7b409e42001d74740c666bed02f4f84511e514129d74f5
SSDEEP 768:j9C60zuhkxM6MavKgk1Spk8oCsoqXNpnIpDGQuxibrHOoijWo/LHZ3YnzOPzk:jochBza5ooqUyxibrHSjWQ1zk
MD5 SHA1 SHA512 SSDEEP

iframe/rolloutfile.tv12.1.tv

SHA256 532390d53875a3f4255daa6651ed97d58d2a6febe3bb498a376c4bd463de00d3
MD5 d8f2b9fd342c40a825826959e83e133d
SHA1 9ad57a203841123fadf849a5e1fae5ea69e18eae
SHA512 7db822f73c2ca1a3ae96d71b576d72698940a9db3aa9c69a88f7bf671f9af84c1c117d69d436c81ab868bed54355fbc34beb07a5de940d4ef9e04c5068274beb
SSDEEP 384:+u7eiv+pxGJoMMpWq6g+rTLF5wtyZVbActis7s4jzAlnkmyO:/7edpxVB6g+3B9xhQlkdO
MD5 SHA1 SHA512 SSDEEP

iframe/rolloutfile.tv13.0.tv

SHA256 d26dba83ece740906be2dacd7abdffa987c14637afac0671a3109949ce3b69f5
MD5 a83de7201cccd9485dfed0806e90359c
SHA1 4155914e42b801a942cd20aff245e89cfe447fdd
SHA512 107db329809dfc05b46363913fe5412d8bee6f8b282809e6b39e6d6b460c8f55f752e60d4be4e984527a3ae5b84235647f7d7bd4737e8106a8ac348a1af42aec
SSDEEP 3072:iq5hdHlnKtpQBkHJ6M4y/XkL781khSUbSw0cNQlElQ7O3M:iLPQBkHAM4aXkL7r950KQ/7
MD5 SHA1 SHA512 SSDEEP

iframe/rolloutfile.tv13.1.tv

SHA256 81152c8e373214fd650054022d3bf0084aa82c3ccec9129ea203d55e452d0055
MD5 53260b1db8a87ecaa3ab92b5f7902edc
SHA1 2ae0cad0e6fad13c4679c388dbc3145bfd720e95
SHA512 2e9087e38b13db54ddcfcd4a361e14d02f997c7af12013afec4d8bb0d834fe672a67bcde618f05847f151aec82f94ff80d3acfc77a52da60e54f0365f5016f42
SSDEEP 1536:aZF2L1UqwpDtRfmvQV9HReQDk5gWijs9LIx83O8HIsZ+VprDKZNyGQ:aZFs1DwpDtlI49HsQmgpjYLIW3ZOGQ
MD5 SHA1 SHA512 SSDEEP

iframe/rolloutfile.tv14.0.tv

SHA256 fe16a88408b0aea45d54f76cfece7c6dc05472f1df0114e03b53f666e052edf5
MD5 7fcb48173f6d43c935d99f267b624d46
SHA1 ec2988da7f576ca24aa9ddd72935927ef1c55b73
SHA512 2ab3dd71c8945bc42f6b085445baa7f3e3ee97347f43102694c07094c42bf8d68443c831ed7516c4eb8f2a5a22907cb7d30bc0bdff99014c632ca9501681f4b5
SSDEEP 1536:/CcSyvf/k9iIKqv69OynMPfAi3hwSpisLnNoDcL3M6ykOa:K2vfM9iav1AmiseDcw697
MD5 SHA1 SHA512 SSDEEP

iframe/rolloutfile.tv14.1.tv

SHA256 689362d631803649a524f57ab7da1a1f89087d0714bfc075242ba78749f32240
MD5 6d673594e2503c0049e198f4cb7dfb5a
SHA1 82d80045f6a3caf40adeead7c357344a8e6c5b4a
SHA512 0fca23a88969430049af6f7fa3e259407e142e75322669611ad343ca9615130f1e05745dbd00469b2ef5a0406bcb9a621ffd4827f80c2d57c82b5bf5062d7011
SSDEEP 384:NuudZYXLDa9rogt2RKaclgBDIkjeKr0KEF0Pz6SHPDcQWuMHmvs0c4AGoxtaaRIe:4cZ+Dap2R2aDIHGPPz6G7fWNwATtqDC
MD5 SHA1 SHA512 SSDEEP

iframe/rolloutfile.tv15.0.tv

SHA256 8b8466541806b1ae069fea333ee384b8b4a469381e9cfa03a97c76315adaf093
MD5 bb17dfca44abbdfbb7ce951ddfc1ecbb
SHA1 e5330fa009a009a9c7379be5cf24ac728ae6f7de
SHA512 071ca6d1589a88099b16d4186514d0134a06918ce52777c8cb65a640841b364d5768722669299f99543bf97f72feba4c81e30ea22e0a4e7709d902562b96652c
SSDEEP 768:HrMJRqirf1f2qzcOtV20pD1c8KTuQufBgLnT0HjGOXMcasyFL7m60D:HIJb1eZOtgwD+T9DcjLXMcasyFLyh
MD5 SHA1 SHA512 SSDEEP

iframe/rolloutfile.tv15.1.tv

SHA256 e0bffd2ea56ec497a62bb2e7247c1d31f58e361a19873343fceb6362515afe79
MD5 c7f272032974b9b7dd6006c6d90311a6
SHA1 0b33f18ade7a32b0b3c18184ff671af928082597
SHA512 ff33da83e445e53e10fcc8c1aaec5d6c5b20356e346360a67955b4d3b7ea012f5b2ae19b02cc47c3d0c8e4eb89b21e6e59af8817dda2153b4ac61b31b28a964e
SSDEEP 768:TplT6RTWSWz4RkprN1Z+8+01GUjbSicOJZJZ:Tpl6xYz4RkX+a1GUjbSaL
MD5 SHA1 SHA512 SSDEEP

iframe/rolloutfile.tv16.0.tv

SHA256 6263aec9fdc3af78260fcf04be5296b935693a5a3ec939c6e8f03e41d2816b47
MD5 7b79c97829511e7d83a8193c3ebc7eac
SHA1 26cc77df1763846094d2435f1e49f6bf005b67a9
SHA512 b094c2c07cbfbf9697a1e3e2c0c6cbdb64d19d97e9c7ed37926cccfde2ab9044250f65f0a364ef260a3d9cb342ac934b78154289696fab2ef928f2ee531cc576
SSDEEP 1536:ewC2Lwtm6WiCzlAVWOsTfKydKWdvTMsC20CHBF:ewC2Lwtm6WiBVcjKydnFMsC20ChF
MD5 SHA1 SHA512 SSDEEP

iframe/rolloutfile.tv16.1.tv

SHA256 dc6a37cebca365d4bd7d9a5f1264152bc2c2ecdfd99f46d218deec48590eb7a8
MD5 7912e1f704cc2578e93e688281941be4
SHA1 deda869588962f644fea0f73e783d6d2fd24cc66
SHA512 76a0f32f003c78dc1d6a1838f0b3843aa8eed7f72ca93b285412c9eaf354d7c3ccd4f94dea130dec532e92b7cdcde92109db80e92a077f64edd62851502ebd27
SSDEEP 768:pFXHMCGKZDh3aHq7+NBC/32kQanuByYIJ:/H6KdhKbN2BkyYs
MD5 SHA1 SHA512 SSDEEP

iframe/rolloutfile.tv17.0.tv

SHA256 4298b888c489a1c7f5740d307836f3b7a1fd608c46b4d72453a47bbb75566360
MD5 6b9becf5612065bc63b5c079585985a7
SHA1 38e2c3867817f3bf3097277eb07ed06c03d93874
SHA512 14ce1a97f3f481950fba4643f64d3890587b1f0bd268761b811be5809c82faa72192736875360bd4f931ddc31d8b6acf1813a408ff486dad7693f810051716d3
SSDEEP 768:nXJXZh9PIMjoE1iL6ZFGm3s+O/MRxWyZ7Ofniye572jns76diJJALwlOrNMIrrl4:ZXZ3V8EcF9/MRsnA7onsm8ALwlkMIOEs
MD5 SHA1 SHA512 SSDEEP

iframe/rolloutfile.tv17.1.tv

SHA256 bf78e9eb237652fb3003dfe13b05e7be32e309d4ca34e02e0806eaa571f89827
MD5 9052c2f9c2c94e3b2395591570cbb457
SHA1 7cfad03ab6d8d9de481e668617c749a971c97713
SHA512 b70922fa46a585ac9d461ca8154f7c67669bc22db7f820e7da2cd4ec10e775afa41fa7fbc1e2f528f585fed07d961524cc8801edae7c5dccda5a4f52f5df5b74
SSDEEP 384:sWfeVBEFQaJRLvlfJI/LN7kd/B80zhlvNcLcK8ZceRwnAHWIucv+koej:sWfwQLv3IDR65pz7NcLcvhRGoWIVHoej
MD5 SHA1 SHA512 SSDEEP

iframe/rolloutfile.tv18.0.tv

SHA256 457b6376115bafc3d64a644e24ea2961b84946331311b1f44e7af538f78f2ce0
MD5 45746ba6877b3304ab3d38aa70a7edbe
SHA1 7567dbea843c23da5c1d5cfd160e58e66c4d0cb2
SHA512 7e186a710774ef35f9b4aa7858b1e1789f891d605f927285fa8acf0ff6e2979ec45e7cf6b34d28c884b0b25cceffb421007347929cdcf0d6ea40bf9d3b3c91fd
SSDEEP 1536:wIBBPVAh+dY5fTORDEPq4rCcMbC5s+CZORGPkvrGqG0nfl:HBBPOgdufiRD1cYLZnkvadqN
MD5 SHA1 SHA512 SSDEEP

iframe/rolloutfile.tv18.1.tv

SHA256 4be3193327594dc2ab08f0f68599058b0773a9478d1b400d72f1041803acf752
MD5 768b325add4f96b5bc83322e8529275f
SHA1 eefe44c5cc7de7ddffcc770b26eade0bee00c424
SHA512 f3056304aebbfd83b3c1aab870d37942f03d9989d7dc532420e76beda8d9e61c0857fd055d9b1acda639a43cee2b05fe217187f5374e3dcc82da3e734a379333
SSDEEP 768:usxL+xU/q0WMRc00T8qTO77OVWH3kmS5wOWlwaKpIQKlDPhx6KkADKaAe7wn92mk:hxLUVPH00wqC7KIXMDWdKpIllDvB2nUJ
MD5 SHA1 SHA512 SSDEEP

iframe/rolloutfile.tv19.0.tv

SHA256 463d3ddcd8b7dae74698ba5fba6a3130497f4369b51423540ecb71eac27da509
MD5 e438dc023c674674aa37e43fc66249a3
SHA1 e5588da78132654432315394a455030fe69de138
SHA512 e2c520f6fc4e7c85383e6440f4a1b03bcbce03cb6070518b110839f303604b8491b9bde665780bb111162c5820b3fe6205110db3c65033d32f0f46c284ef9f2d
SSDEEP 768:SGa16i7ZHH+uj3wOMu0f1eVgHcDdcWe+Z30BDAPH5sdapBpPqIULXl:Y7ZHDkOCf1e2HQcWfCywa/pSFL1
MD5 SHA1 SHA512 SSDEEP

iframe/rolloutfile.tv19.1.tv

SHA256 f796469ba1bf816845e4fc404e65e2f362d6003aa709f67a61fd0f197d172ab8
MD5 b9c40a237d08ac5578c2ef8f99f645b4
SHA1 50536a26e7e4f5493b77c739a41d827342f287ad
SHA512 244ab2d97e7d9c81e7021cad6f9a543a8df75a39461db26ad871ff0e744e27d7459f189ee1f1eca642e07d3498e443b4cd61d906f3d4cec635f8b7144db6a866
SSDEEP 768:ntToWJ+8TwSipSwC58z2wLFtgemFo2XwJ3vsxhfU1TnJI9:VoWP/ippoExuosxa1bJs
MD5 SHA1 SHA512 SSDEEP

iframe/rolloutfile.tv2.1.tv

SHA256 82edc477d215b067be4ecc402aeb3588935cb67f432610fc1f72042f955bc81a
MD5 939186f8a32d0ab4fa3354e733ed8bdb
SHA1 494a32952530f6cd8257a5abd7250c33baa3c753
SHA512 24bf8c6eb0bcd72749f281bdc8d8710147af4a43aac269a127e076007c51aa7a8511f003694520d2f890ab39d040ed07ed3152edd6ff02dd3518b310ab0113a1
SSDEEP 768:pQlp1O3bmYk7/8S2zT+WP1Z4dZnIE6a00NwxsgvnB5dC8Ad6wu1uEZL/9wylB2w8:pOp1Ipk7UBzT+OUIONwvy6whEZz9ZBz8
MD5 SHA1 SHA512 SSDEEP

iframe/rolloutfile.tv2.2.tv

SHA256 327b9623693ca95293086adfa0bb9a584c73b575069847f2c640a595d1960983
MD5 157affe0c1eaf5974f611c7b6adfa1d3
SHA1 43924dad50f09322373a88cc969ce3c73764daf2
SHA512 8748d63ffe3a1c6a2433755e7841cf8f56bb281872862f2140d7f410e16c06d31ead7e828c4f82cf331601221a7eb0bd599a211fc08f3607b6132e78aa65a30e
SSDEEP 1536:DELlY0JytJowrS7WVNokjyAEj6WcOUtLmI93EmzH:03YFmBkjy5hrwl90A
MD5 SHA1 SHA512 SSDEEP

iframe/rolloutfile.tv2.3.tv

SHA256 e1f40737924913a41769955c12915c06a5e1427b41388a848af56de54c813538
MD5 fcf2c6af94a6836ae4d03c2cf4762cef
SHA1 1afa43ca9528d9bc8a03c975027d44debb567630
SHA512 3f9afbedcd90fda28706672f8dacfa66c56bf9a8a227f18ea5ced7d98f3e11244bcca4118aa805c5f8cfaec216c60cf63184ef6b3b8e929c852389b9a08f2eb0
SSDEEP 768:sDxcJVn8E38rFm50bjjAubwhVmGz7iveEbqJlrv4MgyqzNssLxgq0xF:s8b38rFmYjdAmGzGvjWJBv9gzZ+JP
MD5 SHA1 SHA512 SSDEEP

iframe/rolloutfile.tv2.4.tv

SHA256 c90ac227b058668e8a87d67b08a00377b2c2f7f0c16a450101f53b8bb421f7e0
MD5 b71fd017c458019ae71ac4a944452282
SHA1 1864167577e83bcd8468dd98c5fa11dc0f25d975
SHA512 e46c7733594425b077bc11d6dee40a7967211788d52ccb699a9a3e562286557ded21a22861d68e8e9b8c4f2f90396c700aa36c23f575b9edcc64faf1a63eca3c
SSDEEP 768:08OAlwJgatPc+lc53Q+xFEONsyFaEuygd9k4tD434+mZpfDEign:08XatPchA4NNZaKmFD4o+mZprEign
MD5 SHA1 SHA512 SSDEEP

iframe/rolloutfile.tv2.5.tv

SHA256 f4cc3cd7a977cf02a79f3fea7b24694998dede25c046cd6969d26f77de5d1957
MD5 9ebdd888ab14272d7c4e51cfc6b76b55
SHA1 f507b74987a9046b63a931bb0e24d43d6506a99a
SHA512 51bd2fec13fc0b5d6ab5ae630a6f7b81dc1e3f212fa7f0e1f545fa1dba89f5754458d8f8cebc94ce8444ed0750c904c0113dc86161685dda61280912c887ed75
SSDEEP 768:l1KWjKT3y4rdFRbqFuu0GUvwsyjcBNhuIhg32UaULNZaAMGWo806j+pSWcrxAR92:lzjKLZFZXu0PvnyjsUF3VBxZaA1w0aDF
MD5 SHA1 SHA512 SSDEEP

iframe/rolloutfile.tv2.6.tv

SHA256 274a073939881c5f0b32ffe301018175f3f4d162128bc40ff0ba5770b561baae
MD5 4bc03ee13e5252a062318d0cb3c080ad
SHA1 94f2d5fc5896bb53bfa511efb500e423d0c4740e
SHA512 3723363b787a780cd21389c802b0fc9874e57f1b5678029a710604b11c45a10a946f3f0fd9b7244915a718de940edbb24d98d20b9d6f6e65c225cf1570643237
SSDEEP 384:qSBfNLXHPYeQOLOh1uK67HzrgW+mK22oeX0:JBfNvephGEWz52PX0
MD5 SHA1 SHA512 SSDEEP

iframe/rolloutfile.tv20.0.tv

SHA256 32637e9530909ebfced8e912bb83217708947c47f31714de63097c52e9d0869e
MD5 0c137db5c3ac52c62e6352cb41e7b729
SHA1 df7062c1843008839b73674bb33aee9ea640334c
SHA512 fe12e0670087916e504c2afe9ec30d78e2555cc5f0d4f9713531324bfc5184ba7e5aea7d6a926503269e5cb75955a412e76422b20eb73e484f2580947516958e
SSDEEP 1536:IBjW0mMKyMbeP7WIJ7wRk/i84R2O3qVW5rJjHLMA2Wq6:xRMKqP7WIJ7w870KudHz
MD5 SHA1 SHA512 SSDEEP

iframe/rolloutfile.tv20.1.tv

SHA256 5542532ade5f4ba5519a83f2f42ca1f9df9f81a552b4029ec96fbc1e6124e387
MD5 24fd3480d88a2f14dbc1e01f40302c3a
SHA1 d3a39c4250cb2b5ac78ce9bc054ea8a96157e78f
SHA512 0cd5c6a298098a36a2c7097a1ed2998feae5e85215dd60c07ae3168f4f6ae776107aac63f351cef3ca7f4e1675e3c6cb0e902bae93067a0bfe77306f1aeb3af6
SSDEEP 768:6vBjmPiIkflpFeQazv7VewueIQ8ZZS8FJZrknNVmkhHT2i:IBjm6htpFv+DVXuAQpFJZamkpT2i
MD5 SHA1 SHA512 SSDEEP

iframe/rolloutfile.tv21.0.tv

SHA256 73f13a78b4a2e9d528c772f93716b444b02d8b6be4167d5170575c5d0386ea66
MD5 7875d2a09eb264b1188e61fb70da3d77
SHA1 3ecf776441d40598ac028e42edc2225886bb2b44
SHA512 5702811fef979bd17dfa746a18868bc54dc7b2956ba4d51623886b4fe5373188e737adbac821c93b158dc882abb8da3db5ae2394b0dbee881e5797e16e7825fa
SSDEEP 768:hELNiwgqX8upqa8aUMJE9kTrGaRoVTqSMfn81+5b3hQ82NCgdGAwZ/A4XmCGzV:hEpiwgpIq/a/JEwrLHn3BhQ8NgkZYcm
MD5 SHA1 SHA512 SSDEEP

iframe/rolloutfile.tv21.1.tv

SHA256 d8d661e6ef4ceedaa715a7d797313dcdf6d6f82441e09a7deba90c6e486f7d49
MD5 d5c8769e15db21e12238f5c8a284edea
SHA1 94a78701f7e34de78dad00a5a1f23d43a989993a
SHA512 8c7209b16b45f184f3643095f4e8c0e9a4a2c8493478b6488d1e5752c24990dda0aa7e6b9ca5132f2955e4a8fca73f42300933bc1888221fa91055a8ea807bfb
SSDEEP 384:kA5vd636Eche7Jl6k+zgYohIFhJhObG/2PR1LiAlqtiMKB518OabzbXgbg69aIiP:DxvzheKkVFihaG/2PLLiWqteB8dzSH2P
MD5 SHA1 SHA512 SSDEEP

iframe/rolloutfile.tv22.0.tv

SHA256 ba6c9cd093fcfb5962b8cc28bc68f225ec1577fe4e9ec7a94ed2c5a80060e5c0
MD5 2916985a60ee9f4bbb4296378f2ece11
SHA1 b429485efc4d1b1798d56e7bd140c4e6a7b55e8f
SHA512 da46b6454ee10258f2bc48018b12ea551019b370257971ca5d77e8c27b93e2bef999b09e4a64c2ba44f8a2056d56abb095b8c1c771237ae64fe44f1a9c458735
SSDEEP 3072:o1DUMrxXJ0iSDakVIHePP9WCUQlTa8yI0yw5L06:m1dLwIHgVvUQ88RYLH
MD5 SHA1 SHA512 SSDEEP

iframe/rolloutfile.tv22.1.tv

SHA256 ff2364edb1c547df1e9b1c281b370fb7eda107f52ca056e9aef13ac12565ae21
MD5 95cb3aa37c322cf7a599f0c23fcf4f6c
SHA1 72c99f81b074a9cba39b1af4dac9fd0c43b2afd5
SHA512 66cca6734fa8b5cc98c12eed8b76ccf6c6ba1e5bbe308fc5951ffd2a37ea3d3486e93295f9f088c770123c32037d42520ef3d61bccd5060f358c2cdc99937632
SSDEEP 768:BW6NLAMlM5lm5UbWs9Ofw4S4hBIzswX5WvKpx3DVumBoux:BW6q4MThF96F5BIzoybpuenx
MD5 SHA1 SHA512 SSDEEP

iframe/rolloutfile.tv23.0.tv

SHA256 695c7fd19c2d2ead600320162649069ae25c7151a1e726667ba3a0d3372c16e3
MD5 733e5b54dddc679acdf40ac5f26d4fa4
SHA1 678688c8a8616f96b1932c5c5911fcb4aaf529e5
SHA512 1d862a257c2b2a624a2c034f7b8bb2c780868d4dfc5400ecd89ee28c9ce92c750872039838bf1d9c17e2442039216b07724fd3ffd3cfa3388cd3ead5261d2a97
SSDEEP 768:seHCi1iA+s5XzxGwjiEGSMKKOTqhURoGgW85qCkXLy64PfkzCvnWknyRNpK+AaHF:s+Tus5XzUwsoRoGlGoZ4PyCvx0K+BPN
MD5 SHA1 SHA512 SSDEEP

iframe/rolloutfile.tv23.1.tv

SHA256 d6344ba8647b88b8fef0b77ffaf68c57d98723af9556db448f74eeae5118775b
MD5 54917fe44a0f38bf9ee5801d76eca9ed
SHA1 47615343207fb691b7bae7af8c5aeed78c4a1aae
SHA512 82abac17abb421eeee0ec24b652981a45b666a3ecc549f2a7624ca8535508efc38ffae112e41bb9479264da3c1d39972a2980fa5d7327d273cb7a37c8effee17
SSDEEP 384:YBKlUBoR3lKt8RN5Isbdglr6Gy4/AZI+/kjnj04OjSBkDBqmb9OGv:YBToV1r2ln+3cjnZkSBmb9L
MD5 SHA1 SHA512 SSDEEP

iframe/rolloutfile.tv24.0.tv

SHA256 c080c8f3116629f3f4ef34b7b6bace48ff2c09053d83246c674172382ad8bf3d
MD5 e5c7ca7b152564479c03ccde76bab259
SHA1 82d04c4bec3bd0e6ddf2d607816a2af6e65adb70
SHA512 698203c25a4105138c165835db3255db6dd72db0ffbf0e92a9bc0c28b814468d6797e4995084e0e9377087d5d25e0c42a42ed19e1f75b77fade5473a77d64990
SSDEEP 1536:BW6gbeM3efc488UkpNzi1JGachyyHkttFxJOn/btEdu:o7D3efVwXD1cwyHadCL
MD5 SHA1 SHA512 SSDEEP

iframe/rolloutfile.tv24.1.tv

SHA256 9a3966dbfba20d650285d6f15ac4a952521fe200e3a55ac57b7e4a723ccc15c9
MD5 ee7154cee3bb9e2de75004b49fa68c96
SHA1 ef0afe3b5a4bf5e3b130e727633d799b515f6bcf
SHA512 c41ea0d25349517801c7d15c112e3d08e6f86757695c500e01ce699f00a3afd1c51057527fcfc373544c69412ae19a277ef9510692ec552a743cbf7bfc22cff8
SSDEEP 768:BW6NRmB+dTCjT4/fLjwGtyUj3qzJsUvhhUplhvXCFuPHtLYPpSLKxZwUNFn+:BW6yBe3nLjwgPj3svhhSBHOPQvUN5+
MD5 SHA1 SHA512 SSDEEP

iframe/rolloutfile.tv25.0.tv

SHA256 a88e71da64726377131b7549ad65439aa903c11dd20e0c752e0feb3e93004c2a
MD5 3fae72c51509ce9081644f1cbd63632c
SHA1 8f89212166c793f1ab1cb37d2a6274a66dff150c
SHA512 4de7d6cd9bf3a0580cb08ec2ad0269372d15e95c40b0e315369df81e049822462f60ed59ec61b16dc0ee9cfa020365f4a32ec541ad6ebf82f824298b3236d33c
SSDEEP 1536:BW6yMPD+OmArY8hv7Gy6Y9bLIMnncToL377Hbl3v4kswrwb36AROfPgFUAi8Gv/D:osPhm6zhv7X6YZLIMnCaR4CM6aOfPgzM
MD5 SHA1 SHA512 SSDEEP

iframe/rolloutfile.tv25.1.tv

SHA256 ad31d45b545ba9f23228c8abb83adddf0fdc83a79b480d7491cabcc131c7dcff
MD5 76cb2a0e66581bc39db725b515fcbc40
SHA1 0b419b3db7480565ac9f6912f3a8ed08bedcc396
SHA512 96d222b0e78eb6616cc638f17eb09fe14d07407d44814aba1eaaf4f040e30b86b5563fe50c268a7864dd12ed1ba0c21c1b0b948414f499ab1604a042f6a04606
SSDEEP 768:BW6N8iGBEf5Evbx5OLAo73gE0ctDDych4yq8UB7Y34xdFBt:BW6kB6Ao7nZH4fHfBt
MD5 SHA1 SHA512 SSDEEP

iframe/rolloutfile.tv26.0.tv

SHA256 61726e78efbe239945f68f71a4b602df36eb2dc1339c3f87b1e0a36c5a5805b3
MD5 0f4ff54e5b0f4309edaa45c5ca58727b
SHA1 c6563ba741af6f4f4503cec1eac5f4a31e42addf
SHA512 44ae630f7a92ccfaf0bc32a422586cb7a5a4c584320f71c614773d5396c2dc2daebe37bd272a4f44b4d96999723177219fba43f94abb2d1d32d7f06cb79d5c21
SSDEEP 768:6cE/KrRjcF8inUqoJvDg/vm7AefJVOFaJZ9qiHHEp7L1kMXAG0vBmnMKh/Y3v:vESGnbIVOFaJXqiH+bhMkuv
MD5 SHA1 SHA512 SSDEEP

iframe/rolloutfile.tv26.1.tv

SHA256 fe35cbcfcb39b0e16f4d566066d836aeca905846b93af14564318d6749319358
MD5 f75d013e885fa041758af76ad02d1675
SHA1 3f2354e83eab4ceacace5c3bd29f466af5d4f0a4
SHA512 8a2e52d470de7606dd3c010ac6453cbe00cba828cb18ff1387fe5ea7fc7276f167729b12fcc79457c9c12a47851010f53740dde72eb2a92e481c3d29ed52a24d
SSDEEP 768:vnOG9QlCF465RBoBE3Z2BJ3ZcIlIxktm1Ibez48Et:vOGjTLQfQWtm+CG
MD5 SHA1 SHA512 SSDEEP

iframe/rolloutfile.tv27.0.tv

SHA256 0aae911168574ccab790e80cc93291c80413e9291d3c9aa1bb563898d1cde066
MD5 7fdf79ddb121e216253f2654c59a757a
SHA1 5933b2f212e61eeb9b7ee777d4598007a60d8edc
SHA512 4fede53b074e56609b0517958072ebc76ec8266fa6db57ca92a98fbae2f058642fe3a5dc41c030eb981bd54e8ba74b71d3cf08ce9ed7faa247e23eafb91e945a
SSDEEP 1536:/XEvvQSke4bQsWITYy6YjdcDnZ0Q+53GLJ:vWvQKgYyXZcb23GLJ
MD5 SHA1 SHA512 SSDEEP

iframe/rolloutfile.tv27.1.tv

SHA256 aedb00a1b5776a7e891563b1e5a934144e2c357e63a103a97c50c9cf4a78f4ca
MD5 e83720d7bc83e36ee56038cade61dd9e
SHA1 27d45e3c5c63307f5a4d190b752340f8fa863700
SHA512 6d4096f9283e99c1fd84482a2c6cbd6ced396a7c27a5e453510902ef5752ea4de61e7201469398b8fe9c4a969246b2fea9377a85ce8b3ccbdc826b98e75ad4da
SSDEEP 768:ALIcI8qi43St77uRngYO5u8jXCeUi+zHK8oHJ76MhvONVsknd:Ndhi4MOpgYOg8jeiyK1J7ThvONVTd
MD5 SHA1 SHA512 SSDEEP

iframe/rolloutfile.tv28.0.tv

SHA256 47ce7b9e0280e8a8c7f124f17b0f511f8284f404877e2b45f382644fdbd3b600
MD5 c0d0338c78bb17ba88657925464518a3
SHA1 819198539543ba5512dbf846b5c6330af4e92120
SHA512 167bcef37b967e0250728cfffa857fbf6a82d663de6d3e0c51377c98c5b69a18da665e04888c925f35573f958ef8edd556e846f00e47181ad9f3ea52057fea8a
SSDEEP 3072:omM2mgSWNnwxBw9OSXeABHSqpIqVucQHyUfVWiUtFlTRbw:ZmgSkzkOxWpSUfVSDY
MD5 SHA1 SHA512 SSDEEP

iframe/rolloutfile.tv28.1.tv

SHA256 e680dee4a40d2900d10da5c5ef01455aa81ba4297baf5df582042a1c140ac791
MD5 9440c5b9a04a32ca0697a50b23cfda3d
SHA1 b3196a21dbc1871ca1194e95ee1c26349c80472f
SHA512 ab7d98034ee2f9171959396589a5c1b686eacef90fb6197389d599143e61f0eab698632b33ac10537ec0f2002ffc20b7e342beb8e4cd00a481a0fdcbda8aea5a
SSDEEP 768:BW6NmwrCRM4cPrk7GQ6P8ImDKUl/roOWnJjv9Oz4bDNqpzBLeaDDHu5Mj4:BW6Y9yjAM4l87nBv9Oz44hFuv
MD5 SHA1 SHA512 SSDEEP

iframe/rolloutfile.tv29.0.tv

SHA256 5ecd066a3be7ccd80195346a7e1076512702eac7bb74ceabff45aad65dcead69
MD5 2b0be4f0426f411fe3b4c85fc6336756
SHA1 5059fd6e9bcc411c36d41d77fae32cee93a50964
SHA512 4a47bbaa0a92c9e0d554c005ac6638ef4d8358fd44ff6436981772d2514bc9377ae78757ed1908207f9595d9deaa239d2e9478374894716ba618a64f623fe6a8
SSDEEP 1536:t/r7fqsmNU2eZgGsbih5/KmeQxSJINwmJexlW:VreZqgV+xSaNwmJexlW
MD5 SHA1 SHA512 SSDEEP

iframe/rolloutfile.tv29.1.tv

SHA256 9cfea55290eda61701a2d32a80e338172bb6e4cdaf2ad24a884c82d115509bfa
MD5 a35de7cf10e2ad2207d3e7cf8d4ff6b0
SHA1 31761be2f0fb91c2603c8885c29c29aa43959542
SHA512 dbe4cafb2f744f6409ca4104e53517f412dddef25a1abe481375a58ed9bd76469b1dc629f44913aebff87551d75884387a6852adf38f68703d3ed4fe1e9e5c8f
SSDEEP 768:C5+BdNl2Ec3S3rX2c2jZGUP/EC7BLR5TJgdTuo0:S+Bl2xT3v/Jhsao0
MD5 SHA1 SHA512 SSDEEP

iframe/rolloutfile.tv3.0.tv

SHA256 a520e9ebaa7ad9fbe091c482efbd645167ad8a6e2d2e9c53ec556a9228e14343
MD5 c02ef98f2dfa4ee61a78f0510aea879e
SHA1 c0006bec63be9cabc7ea7157f5be093f64409e77
SHA512 c5d17869dd07b9ba13adf789276db7ea12b20f1d69a084c1c1a9c0801fa091004ad4afb25f973f945bdf6fbb5006a11b5567c3f7d4559081ddf2c3f3555b52cb
SSDEEP 768:0ILGm2MawktL5E4131zCv1uijCUO0GF6IEcBVYD8L+j69jWzHG7HX1sM8Pj3tr5E:0dmNaw82U1z68i1w69cBpKeMH+3+M8PM
MD5 SHA1 SHA512 SSDEEP

iframe/rolloutfile.tv3.1.tv

SHA256 6a24615b1bf9710c464491c118861acb9d1b7fffe51f74059e98dd2ddcf0367b
MD5 224d38f4a85253146d4753705c904fbe
SHA1 1b2df72600b4bd3379727014d5ab50c2d9985233
SHA512 b45be403272fee01964c01b56897a9e07778d9700e993a93af867a9bc2db8df8c8147fe22f5bdf76c74661cc2f75fa167273f1f13da61434cd03f3ad732194d1
SSDEEP 768:i1w1ZFJyKo+iMtDCbO/46zLclPI0JjQ5zrqGiQCwKKY4EuD/WmZ+m9NnG3Hg:8w1l3SwDCbOw6fctZQ5zrq9QCwhi47ZL
MD5 SHA1 SHA512 SSDEEP

iframe/rolloutfile.tv3.2.tv

SHA256 7781db13d97fa0f020c8a50238eb65ebb1a0b41ce3192a8e362ab124e8a65823
MD5 2c4e60807934f9d121b141030114bd10
SHA1 9f3b22e415e26dc5ac67399e60ed7f4287fa1517
SHA512 2f2d865c2f533a3956b495f3ddc357f0a6ff416288bbc2ab73212284e15fba99747e342408f3e86cf651c6b2da8f7bf40aaf20b6f8f26b1bc5b4d108db1f742c
SSDEEP 768:WiVamGrDQ0uR/Yhpyn6NPyf5q6CHhIRRDplni:rGXY/KyWyRq6CwD6
MD5 SHA1 SHA512 SSDEEP

iframe/rolloutfile.tv30.0.tv

SHA256 ab17f0637f1f57c35b99fe87846508b78dd104a8ea91496d96b63e56f6a6836b
MD5 baa41e311ff75bb8b13410d7ad4cd67c
SHA1 badc52ef7b8fea0f6cb322c5cb8312cc005ce037
SHA512 d08ef8f078aff5cd3280d35fbaefbac5f20823e8e4bdea4dbf6265ce14aa341ee6a4ff0ea3e64f59949b0887a28454350280ed35d2be8d8827065e99d85080e4
SSDEEP 1536:BW6w04FuM9eKQBBDsPZpGf5EoiGIM97wQqGncwThFj4mhiYk9DEMm6uLeUF:ot63TBBM+f5EoiGIcFnV7XhStvuLee
MD5 SHA1 SHA512 SSDEEP

iframe/rolloutfile.tv30.1.tv

SHA256 7e8baad0110d7834ce0ead72be800e99312c49368074820aba69db0609770e07
MD5 7428bd711bd2d188f698fb8b5f85b7f2
SHA1 782f744d0259bfef25dbb39ff977c2687f40384b
SHA512 332e20f76063ba6dedeb02c50d4d306bbc79eed91d981804f4987bd5dc27e01d23dfcbea43653342cb5f717e82c055451c879890c54f598464c40c3a8f9ac8e7
SSDEEP 768:BW6NwSwh0QblQ8rrE8JILc/PPBg/j9lePOWL7CmY:BW61nsa8ro8JISy/Le2u7G
MD5 SHA1 SHA512 SSDEEP

iframe/rolloutfile.tv31.0.tv

SHA256 08d995e3f009e9181a179dea0908bb54a0bcaa825fc65769d50c9326bd3170d6
MD5 b8cc007ad505d550a8267b2ba6b83e88
SHA1 a8d2c5953484d09b6d33e6f89ff265833fc95715
SHA512 091e7497bd77e03a9153fd772b460c3ebf09e049362d9e81285a0c7e570c58d7f47e0b45a2c440d446d1b7780be5cec9bcbfe5700727df4ce44efe38563429c2
SSDEEP 1536:16stWhhXVaRePQLUWUAfCTjRBkdG/KCQUD:/Yvl7Qweep/PQUD
MD5 SHA1 SHA512 SSDEEP

iframe/rolloutfile.tv31.1.tv

SHA256 1df6fe74f02cb9ab9c35aeee07e33a447bf753229ab839209fe1f2e4a63f4f8b
MD5 6c67ee18676f8b2b9cf7696b0f287b54
SHA1 c6127fb55573f89a28b928588b45042f78010bc2
SHA512 6cbfb751e1a3c773a5fbd1842fcab14c66b403cafd55420ee9e29e736745ce5ecc26e66f7fc8a4a148269662eb619805abfb87b63576dd935cd55ece4ba4146f
SSDEEP 768:eNHQ/1gs5YSg4N8GHPUxskI4ViO8TYJPkbCZtZm5trb:4HS1X5TJNL+sVQJPcCZIrb
MD5 SHA1 SHA512 SSDEEP

iframe/rolloutfile.tv32.0.tv

SHA256 baa56d75727475b14b85eebb8e1b45c4bbe84c13d6945d7d4595ea35671ba84f
MD5 d6d593ba9f9fd6e7fc8c05362bc5d567
SHA1 0f4b12f8c6cd0f31f5410059efdbfa3678ca0e62
SHA512 628830a6f3c3959419d37adea694e579c8c474f4b019ca0980d46e238881f1d5cf5cf3571d1b66645d00b72bdd8a068073fc4b8e18ae8848edbe99cc9dd09e05
SSDEEP 768:9ABpMAWGaS39185VGTaQzJ2O2aG8YEny7DQwCNUqY3/WiYKB5oqcONHe:SBpMA1ho5Q7zJSaG85dLNUqOuil3cT
MD5 SHA1 SHA512 SSDEEP

iframe/rolloutfile.tv32.1.tv

SHA256 146fe179714bd89928f3e8ea5797dd18b6ff48578b6088980e3c73fde661faa3
MD5 e6de0486dc3eec2c163e52f1eae83612
SHA1 c74aa42f9b26f5c77f4a3cc8faae7a6537a969b2
SHA512 d0306ec4d4e07fc8d70973d3f0346b31e161b6037f6cb07b234b4dc41d8b3200dc05bfd839f971030b761311987eb44a971375cc0d5a16661e04a38d7d0a9762
SSDEEP 384:PtPCQ192UzmNAv2089+br3D6NTJc89Kip6L8msfJ6hPvy:1PCQD2QwoD82z6NT7kipdmsx4vy
MD5 SHA1 SHA512 SSDEEP

iframe/rolloutfile.tv33.0.tv

SHA256 4ebd251deebfb35b5dbdd4775057951a77dc916831365cbe1ae32e9249876586
MD5 27b70f410ab79b477d992cc31e199865
SHA1 65e9f133e6f49a1424194e9df35465deeef5f396
SHA512 7b48da6ee4385fd3b0fd1fbf530e09105f21e6954e2680720d615307b65f7bf3ccf52b6533bd011d911f122c1ae4971ebf5ba206ff711aa6321b1e63778ffe11
SSDEEP 1536:IyQywvUJXO1hERVUvzwjLyR/Iv1Y1q4P23qBNDU:Iyp6AChERrjj1Y1zP26BNDU
MD5 SHA1 SHA512 SSDEEP

iframe/rolloutfile.tv33.1.tv

SHA256 b20aafeef6e0a7dec3efdf44f2125e4488bf3357e1c0e41597f6401a776cfca3
MD5 06064a529b029f74cf891601fd2fec49
SHA1 09b7c985b8122d9d1ead37b7526da3b6b3b7ba1e
SHA512 1032657949c928f2e04323d14be033ddaf1c581a466c3cfe1098cc2a8a51184fae3edb640e10c2b5a83a79480d1e104df9ae57fff80746d7658b72dc6f39ad7e
SSDEEP 384:T6F6P2reLdAXtRKeJn+dLpR/MrY19N00SvADX9VpRc:TfP2SpktkTLpq4N07vaLI
MD5 SHA1 SHA512 SSDEEP

iframe/rolloutfile.tv34.0.tv

SHA256 983cf5f456c2d3f09592c6d85922261b90c793b7df34249acdcccc1d827c25a6
MD5 9aeaf1e7ce1d0df535cc87d57d2a1af4
SHA1 ed66580f459b15269bf9ee0d0a9da39f5a2861b0
SHA512 364420df3871ca218e9e0ba3d1bcf32f7ddb33e911d8ea1abc5227e05fe7664d5b797f70fb659d3536e2d20717ca4ce55ea7ecb7928e18417487c569edbf5af1
SSDEEP 1536:m+UaxiIGHTd9n2+0VE9x9Ay+dNKncBlUHON33WGZuTou5034i54/s:rATd88X3YNKncnlZmT1hi5is
MD5 SHA1 SHA512 SSDEEP

iframe/rolloutfile.tv34.1.tv

SHA256 efdf5b374e3704d2177ce6ef45cdb4fd541407101f3b50782cd9780e90637767
MD5 d5c3f3f16ea5cf9e9fcc6060c363ed7e
SHA1 d896e3796a9c4121e04e3117af976a80d276fc7c
SHA512 beeea3986e4689b67561da24b3897c99c4ded51b4b90a3c59f60add915ea3c1a6a63a2afc92a63a92d2c27812f18de500d3948769adc160ef1a27a0a2a448509
SSDEEP 768:X16R4Pau7E8zHg98XTeGb10q1YkEvul3gsl4qdAkKqApUtyhfiVU0:X1Itu7E8EGjeDqSBYNllAZU0fif
MD5 SHA1 SHA512 SSDEEP

iframe/rolloutfile.tv35.0.tv

SHA256 ff1def7d8636c075719ff9149b55b13107fd03b845b2992e7b13778e63eedaae
MD5 b9b31028a3bcf77314ea0911525d6d52
SHA1 c3af0b6ea24c7fbc1e32ec728cc8893a731c8d8d
SHA512 d11a3aded258a248fb3a8417f907073b7702bb3ebc7dc5e7fc97243a7228e5c1553f9666b23e9e3647fea42eac43c66c44a9d9b6e3c647a3f8ce96ca46ddc0cd
SSDEEP 1536:BW6Kt7io21zSAec+0whpuhhIZdUXN7mW9sFBV/o9984lzQtyOqN5YCE0sFvOp:oNtg1zSyhI7UXZWF3ylzqVsYCHsFmp
MD5 SHA1 SHA512 SSDEEP

iframe/rolloutfile.tv35.1.tv

SHA256 c4bdb38663fcb7cf6ff61d5fff8249cbc1a4c32733ecd93a3c4b8db2de6f07f8
MD5 7a5a5c19677de0ce235767e80b4b51e5
SHA1 27b5a479387a1b06c765b3fc56726036aa8404a4
SHA512 17f15a13a1028d7b0a9c93bb17317afffe787587d1f8cf28dcfb27df3eee6a651a0619ad8f4fffa26f5cf133f5ed07b13b13f16fc18aa7831d1141bb55bfb11b
SSDEEP 768:BW6N4LkWXs0eEu0C8kywnULBBZLOzczDG3+tpQ6QC:BW6oFXs0eEu0XwnUVXJgqpQ6QC
MD5 SHA1 SHA512 SSDEEP

iframe/rolloutfile.tv36.0.tv

SHA256 4c3971c4e7ec1fa2a0bde2ba3e3464b9e799e0adc5ac50930a89709d89e6a9d8
MD5 4410d03925f75d78f678e12fff73d085
SHA1 fa9263b2211848cd8072530e64db5792b122fd92
SHA512 24956f05b9e82d59e573f512636814fb51fd217f409a2681ece3c62175ec1052faa7893a7c43fcfd8530a8a527ef47e3624e5804cd236019da8965ea6232cef1
SSDEEP 1536:BW6QuMgxiRsCmwn+LewuTOkfTDLLkR+gch7xQKIJe7iryPuosyjlJ0eIFWBzC:onuM9mwnOEFfLLkep7iryPZVGeIqzC
MD5 SHA1 SHA512 SSDEEP

iframe/rolloutfile.tv36.1.tv

SHA256 2f37e43692050458a0afe04a757b394db89c5b0edb925c2011c87d38ff05b6b3
MD5 dfba6802cf55d4774bdc0f1e52b4ac4b
SHA1 1c41fedf2cb197f415d3a13f091032b9f78e77dc
SHA512 ba4824631d6f1e4d61d9c81141d5e5d450e6e70aee3496f3c16c4383664a91252475ae3a6628e44664228f8f56e0bb12a027c317c58c53ac65b172e0a0049e83
SSDEEP 768:BW6NlCW/VLd+GLu7wsEKYS6rQhdrsgKKJUHFAeWjMiCNi4eHc19C:BW6Tj3Vu7wFKYlQfrfJkWjgNZQc1w
MD5 SHA1 SHA512 SSDEEP

iframe/rolloutfile.tv37.0.tv

SHA256 c66ddbd2b0b4d9a8a4672421d9995aecbaa43ad416fb02df82b8c9b0dfdd1713
MD5 06acc0a129bc4116cd979a95d9674bce
SHA1 5420c546618febe59b8c3573ca094a198c803c1a
SHA512 0494dd5be7f4df49077fbb89f5b0a977259a5c1b9e70b49bf785241b35bbbedca899b06cef0abe4eaff46e651e2ba3665445bb94a694158f52c302c9a1d113aa
SSDEEP 3072:ohm9x5RPprOXw8rWefL6ApTsvv2GjomUZ:d93RVOX/WqJsvv0Z
MD5 SHA1 SHA512 SSDEEP

iframe/rolloutfile.tv37.1.tv

SHA256 fe809c67757e09db29576ee15b571eff62e1f1e33b7a20ea0fb67277601b2122
MD5 5db7c0f065480af5a4614ce92f4912ba
SHA1 8d7375bc3264f441284f0cef70491c2c4fc6e89a
SHA512 2c2e535f492927194e08bdb0b5d68ee39b986bdffcc82ca2e0f584d8d06a41f0b267953df56f4f879fe882b3a12f5df44094e9c57be797aa7ff9957fb68f000f
SSDEEP 768:BW6NqGn1WRMGdjOg3LX4kavtSej3nIaJPVzbHu:BW6MG1Wdwg3NetSO3np/zbO
MD5 SHA1 SHA512 SSDEEP

iframe/rolloutfile.tv38.0.tv

SHA256 6967d2616fd9886575ca5b1de16d340c4821a9dcafe8edf4f36cb839f45c419f
MD5 9162b2d4861bba2f7fda43a05035f0b7
SHA1 a1dd90ed20edd2c8f33e7ec152a9c26a9417ec3a
SHA512 03ad467b8722f7eb29f141bd420c984c19e9650b03460cb533d5a8f1d2f1c366d4de222bc9705cff460c3e9ccea9f5eb0d277e5a0e064cd7d8f2b932a3923d35
SSDEEP 1536:BW6K1UWxHmR9LVrBxj71FtJlc2uZ3tkLVjbEC6/BqXxBl6YV6cLOS+nTXQndgwFd:oHxxGXxDj73t0k120zlLdOKqwFi6
MD5 SHA1 SHA512 SSDEEP

iframe/rolloutfile.tv38.1.tv

SHA256 9e366688f71f0c85881a2cff7221b2cc722fb8fa0deb707c1fcde8968b660762
MD5 e380ef0eb371c78ef0c58b787f5d076b
SHA1 55bc5a33c4f26452bac1f89538a12ae6ef3da199
SHA512 d95bf6e4e4223ad82d4cd00a0ff28a215c870b99feff09c5f94146f919e91d08051c10e252ae7d0193a5d32f4d9b19f1101dca5e0243724f1b65a7d6d5a0c615
SSDEEP 768:BW6Nx34Ff8ttqN4FpPTNRQ5O30ocXIhyJwmt9S76sd:BW6734F8mKrH04e4IJwmt986K
MD5 SHA1 SHA512 SSDEEP

iframe/rolloutfile.tv39.0.tv

SHA256 3be5c3287b2ca8d14e7cfaf25f18bc5e2e75cde3c66fd9a1c03974805125ed85
MD5 e33110c19c40b6672163dea20c705ac2
SHA1 8d90297c04a9e9d3ded7ca004456d82a8bc28224
SHA512 6f9a412851343e62491fc921f5d600c4daa6b968fc4047c8b940b67f19e96e00b4ea154d3d89fd8f492c20fe22845aa081d2c8665e69eb228d03e4e3420fcbf3
SSDEEP 1536:jc04vONfXdw+qL39BDSToaYHEaaf+GEXtrbNTtd7yxM:jc04gfXdyBDM26GNtrbNTmS
MD5 SHA1 SHA512 SSDEEP

iframe/rolloutfile.tv39.1.tv

SHA256 05fcee13ac2cf901fa58351dcd42ba0be8af42dd2b3c82faf0c7cfb0e781fae1
MD5 b16353fa9105e50fa91f78fec9dd7dda
SHA1 3871232a3e6b557d87667cbdc3b8867ffa2314a5
SHA512 d29822178546e2876ba261df2457bb04a24af8c260414fa85eb5a2716f7d12ab081fa4bd510dd2253498d8dda488ae3e22e49caa25343ddfb53d1d2dd33fc82b
SSDEEP 384:5L5QBKujTnbXrR5iOW6Ug/MXk8sNKNHqUomBVPbGxlSdzWmG4pN+PsK5Xd3Me:5ynbXDU6UyM09NmKNIix6zWmG4pN+Ps+
MD5 SHA1 SHA512 SSDEEP

iframe/rolloutfile.tv4.0.tv

SHA256 60a2f8a75cf50a47f9988baaaed84d7702271672056a29d057185b808692c010
MD5 1308af230b4e0776067742f4e0330359
SHA1 b6a3f61e4b0ae6998cb9cf9675bac15a42ae313e
SHA512 49855c6de464660f2316929205c2f9b7d9c2bf8b1fe340ea7132ff2a29b1bc121b1f9d6350e1eb16f597ead914f0691453e1f57b02219d52586f8db924affbb1
SSDEEP 768:9VV1A1MgdkfdloD/dR4RGWZYu0alRl8EV9jzAS1F3aS6dXHDqitOmfiDSk5b4U2f:9VDA1CjoD/dR4o+PLtx0S3lNiC+kFyf
MD5 SHA1 SHA512 SSDEEP

iframe/rolloutfile.tv4.1.tv

SHA256 a84f22da0852d44b78099ff14b67a479079514b14c139aa81ede480e947614b6
MD5 39ec0028514a23dcbbb6c17b9bd7fabd
SHA1 c4fc01c013c30b9cbc1490bf08bd13010d407d56
SHA512 0b811df37b4b00cab6324af6e1969a75cb1dd3597aeefc09177d640d84471600b307fc15e75705958c74f4904e0367bf5a0917781bb62c2ae24ecc34bf8f3cc9
SSDEEP 384:2lkd47ihZ6tzIAZ2eAsIjJBOYwx0S07Q8CbqJUIOpbZy0xgato+m:OahwtzI+2eA31O0L7xCuKpbZxg/l
MD5 SHA1 SHA512 SSDEEP

iframe/rolloutfile.tv40.0.tv

SHA256 09f76d7b2a874dd223b4a5aec27d6a95915f0568b8ebbca6d1f0f9b0f841e6c2
MD5 efac94c13bc5b2eaffc89b4394e90357
SHA1 19235b2ffc1788a56d97d6dc69ff36328f402d79
SHA512 006bdafbd68cba910a1f96f893dfffb0848517a32439bcd7e075e40fd7d55a21ab601b304ee690e31bb4d6138eee50dc0a733b782bfb93ad78b27cba09a168d3
SSDEEP 1536:d8mcqs+3SLwEPX4U54gPnbD8FdiAQEST3omefcBle1TB:Qqs+3SLwEPX3qTSbTtsTB
MD5 SHA1 SHA512 SSDEEP

iframe/rolloutfile.tv40.1.tv

SHA256 58dba71da556e3d78ac3ede673504d74525a1df1981dfa5a132402e28b83f91a
MD5 063c99bf2c9beb1c4281abb0120dd56d
SHA1 c385772f9fea87c48ba0188cc4061a01edd6c78f
SHA512 6d2514f3b8bbdc8cad4eb27ef49bc1e7cfef53333f5503240e274f77bb851dec4933db33593abf64eefb913a21e8f917c510e9f413cf7ee89d4fdccdbcdd9645
SSDEEP 768:L361quL/3/3Bq7KtX3VpvIoab9A1dNjSmHRYW:LCquL//sKp37IoaJ2d8vW
MD5 SHA1 SHA512 SSDEEP

iframe/rolloutfile.tv41.0.tv

SHA256 d0b289395675f7dcc50635856eae3cdb333129d280f94e57a69957a31e055fd6
MD5 3cbc659b35c32ac8fc9056509f9532a1
SHA1 613b6bd4163c96c6a3ddaddab3567f77c3ab43d6
SHA512 b75a6dc97fb1e9748e7a87d3c827f96a9ebb278463665eabf2fdcfb68e14f1d22e8ab46c5724309861f90ff613dca4ffb37bbe945b22fae456171664b661f459
SSDEEP 3072:oCnat77FrPQgF1BMTuR5fHk98XlrFEwq6KeA:Fc7NPn5cmHLEYA
MD5 SHA1 SHA512 SSDEEP

iframe/rolloutfile.tv41.1.tv

SHA256 35ed3ce2452020dbcbfde15d7459f29227255432bd8e989b1e1e06eadc74fedd
MD5 e153883a34d8d61453e407c914c6e224
SHA1 50d489c866e7b2f64082c40ef4297f92d903ca44
SHA512 3a0ce9f95edee9175460ef37b5bc7085e7b068ea7b582088792f7a55e17aefb5ab6e1c13c08b87c5435bcc273f88c61e46e8ae7b5edb8b46ffd2ce844346e5d4
SSDEEP 768:BW6NIjFD9/psw1WOFlzjPiRDlH+SaiKP/xSfRN2qMItmKmlzaZ8qz62VDWYZy4:BW6Wj7/WmVzT0tHXKPpsAOUKmlzaZn6c
MD5 SHA1 SHA512 SSDEEP

iframe/rolloutfile.tv42.0.tv

SHA256 e9b663d1a5a1979d11b9121d74ba4966f3b4f8c99656d2ccce32690ccb591838
MD5 0a1d763f0e1093cf57243710329ba343
SHA1 7abb2c4a496db50baec702ac6e910ae688923e20
SHA512 3b78231c498433f085704c463f0404d6fc807be220bb36fa20fea4d54d463075a5c306dbfc5803364801893ec956987f8486bbe929a60d71459080ff5755005f
SSDEEP 3072:oskcb7jVmsSOoRu1oMoSN59yCkE0zbhGCcoHy6:2vsSOoE1oMtkW0zbgCHS6
MD5 SHA1 SHA512 SSDEEP

iframe/rolloutfile.tv42.1.tv

SHA256 f1911c8309617cd138ed4f6950ded8b801cdb281b73df3a89f948bb1b1ab39f3
MD5 ff705a8008f19e0cebcf4501b9e02d1f
SHA1 04ac8395c578e5358945bdf866d9a8e2026b65c0
SHA512 256c73230dd8ea9d9bac2023ad22b535dbeadc5bdad8eba8349837d82ee75851a8b6c9263cc1cddaa2c9c0abdd23267f9d20e5736bfed9666df34b6f113fa817
SSDEEP 768:BW6NDxYu6sCj+u+SdO7U9YTx2cUQANPRwOdzsaqh0zLP:BW6VxYLsDuQMkx2pNLdzsaqhYLP
MD5 SHA1 SHA512 SSDEEP

iframe/rolloutfile.tv43.0.tv

SHA256 d8538c7ed105e2d19f94434392f3f64042ecdcb9f7083455fde3812d18456e0b
MD5 d620913cf7e64f3fe968bd8680c8a573
SHA1 6c52fc189c0a10cd0817714e574560bc7521ab7b
SHA512 ad56aa0fb114871d47b7a1f95d9c59d850731d350e47b7308f7d566eec61531364e70f6474a300b869834149ced3e544d59f2cbeaeba3f04858898ce6375efed
SSDEEP 1536:BW64X7QSZz36Vpt2YZ2SM9VqbqAc8xND6S3HJcaTUDATnvn7HTmXOtKxTu67OtvK:obREVAKcuD6S3CkrvT4CK8WOZvjW
MD5 SHA1 SHA512 SSDEEP

iframe/rolloutfile.tv43.1.tv

SHA256 19b8e957ad0c081ac0f023105bc945c76656333d81545ce2d156486133c6de0c
MD5 2d584013e76d2f2de66747e4a6e6ca90
SHA1 2e4c872c86a0a12c320e1c67054593b86f2a101d
SHA512 a67e13917849e3ccd829dead25a64b52bcdc3c5bda07de87fc28cb2a107660ebabb52ee7b5d81ff7937a7d5f00171d7ba5c0bcc046454d338fd39ebfdb5a4628
SSDEEP 768:BW6NBT6sT/4Eus5fmDyymOCCXkc3uX6H+Zul:BW6PT6+4EuAzwC+es+s
MD5 SHA1 SHA512 SSDEEP

iframe/rolloutfile.tv44.0.tv

SHA256 9bc2a7e189c165f9008699bdd4eab4c7dc553db5be5fd26db93c0245f83b4582
MD5 a8485eda116656b9bfad172cc3f6cc42
SHA1 1fd0bad89df85457c76f6212c1691185e91def84
SHA512 ca867ce15bf22645132f0aec17fbb42681c272da56c8ecd11ee546bb553745edc412bbc8a403613a5925ab9a507bcba68624a403ade356155f8065208315f353
SSDEEP 1536:BW6attpxpwH63DH0VVcx11LqtJp+COtXTUpQgzYpZCElcBAg9ZDMKa6Gkwh35SDt:o9XxpwHeAu11LqtJpCtXTkQgzYp0ElcT
MD5 SHA1 SHA512 SSDEEP

iframe/rolloutfile.tv44.1.tv

SHA256 fc23b15f7e34faa03b413d5745eb798c7538cc2d59d4f2c2c8193a61fc0305b2
MD5 2d540759d72d86121fa8a98d41eee1f9
SHA1 d460a49016b30dce207724d26857c908e8cc4eaa
SHA512 efc636414f0dbd9cd0903b4b34f1b217fc46f51bdb8e4746703964c21984d20e02fa3e53f4135ea7dfa93e18fe4c995c11b90a2b2a189918e7153b9be624ae90
SSDEEP 768:BW6NF43RCntAnoeq9zEF+FtM3NV9E/NjXPatpQ9h:BW6T4hCt+PqBFtgVG/Nj/atKz
MD5 SHA1 SHA512 SSDEEP

iframe/rolloutfile.tv45.0.tv

SHA256 51de66c33d4c65a5b86822d24f97902e6e88ca4e71065d4dceefafb62f7f247d
MD5 e0917b20825d33b0ca4b6b7cc66932a5
SHA1 cf9adda213a6c95bab8565dffd710447a41105b5
SHA512 1bb53b8aeceebb7a3fa9f0cd18366b0fecb8e25eb5f623cf1bb75422f48622b75c7788ff71606689d93f5759478e75b5ad8676f3fa89c9d612ff604c8ea20f54
SSDEEP 1536:BW6/BuVGYKqbFIcPzASpFMs76tAqTbJH4cLvw:oFGYKqFIcLlpFMU6dZYcLo
MD5 SHA1 SHA512 SSDEEP

iframe/rolloutfile.tv45.1.tv

SHA256 ac8c9cfe5df287524cccd25536b2b70e85fe85ff56d6ab9e4b39b75556c0cbf0
MD5 1f8fe30628cc479bc062d588a231e53a
SHA1 6cd45523f204e284a9b81d8a41295f269a43b560
SHA512 50265b78685c3225bbd8c80ed93a67baece30094ff3f285fa1612a0fd71b0b6a6d6999ab6518df985aa6d140ffa602ba62773d052590287a9b9cee370ea4beae
SSDEEP 768:BW6NCSjTBUMW1mkBjj/zb9jTZGmxP/8l450EKBZK4HT3afm0OhmXKLE:BW6U+tUMW1x/HTGqP/V0EKBZK4Oe0dH
MD5 SHA1 SHA512 SSDEEP

iframe/rolloutfile.tv5.0.tv

SHA256 768daa14a5a46a9dd4d23b9446c7fdca5b4305b039ef228be4220bbd9e582c7d
MD5 35fe7bb6456a7acf34a1137bd5e93507
SHA1 997180496fc23f8372cf7df65c362db872c91425
SHA512 613cc3929ec09dd6ee863fbbb73b46100b2b51c57db223a63b069454754b1380625cf5c02561b3151eed8c941d6c4488841f89408319a74f72d5ab5dcdfba115
SSDEEP 1536:l2cS3xLALocKErd0Eu+kXpOK8/v7jEPmHhNqhG+Arz:Y81KM0Eu+kQZ/vHEPmHhshxKz
MD5 SHA1 SHA512 SSDEEP

iframe/rolloutfile.tv5.1.tv

SHA256 f920d2645cd723ff8ad272c89cefada97fc346c2da29a851f020b2ee7b701dcf
MD5 eb387d03394432659ea3470dddb6504b
SHA1 8538415232e89be17d175fc871cca40e26017614
SHA512 9af2696bc00b130b2be87fcace30406ff3b26152bf888560b82edc6b0699562c82f77619141d2b654e360e63bb5d32dd20fb1df0cc8defadd0d8cc9374c4ae98
SSDEEP 768:98fvu5g8quzq4GVA2GFcMtIw8nvEY0bnZ29WRG:975pqsKGFrKw88xbZ29uG
MD5 SHA1 SHA512 SSDEEP

iframe/rolloutfile.tv6.0.tv

SHA256 5938825f7f3587fff3d7ab363899c811101e1359c3a70e0150213c32e3bbe116
MD5 3e9c3f4e0ccfc9b2ab1cc73c3295d16c
SHA1 093a53004f9e509122c6030688ca879cf067190e
SHA512 79f7ba71b3b91af9bc83c4ba4e2f044506e9cd850991b6d64f5c230e8d6332df9777dc46f15cb5a5383a98ca0046f24a964ded058bce9136327141176a4cebfc
SSDEEP 1536:sobH/b2q0Grhk41C0gnTHZPnFKbMSwrEfnnSevgXzV5ezL8e:so+qh9gTHJbFG6pO8e
MD5 SHA1 SHA512 SSDEEP

iframe/rolloutfile.tv6.1.tv

SHA256 1624ccfe51b559d71b6c5a5afb73bb4547784ed0c7f2fdd6b23373b5531d2b9e
MD5 06e9e3215bd4df6b66dad818ab244a84
SHA1 6d48431042678968ae58123a1234b483f15989cd
SHA512 143d16acb6257972a6d43f3a1d38e4655e81da5641289788950b638927a43ecf9d4c5dc8897bd4f301eb8ab45af40f6e68bd4096101c8ccd59bfc3e7471f98b2
SSDEEP 768:kfYiZ+J7730rXygIZAKJlEGJ0U3uYzBSBrBO6tilpcqB7q0:LiZUrYevl7uYF8rfwpcqBu0
MD5 SHA1 SHA512 SSDEEP

iframe/rolloutfile.tv7.0.tv

SHA256 4f709d8df381c35cc44c218caa50ca008758a4b4292a39f64d57c22af2a7818b
MD5 975c05652ee226a44a84f5952a423c86
SHA1 9fa2e5fda7f0c3fb7f8eef8bb26682e15ecdf2fe
SHA512 fb64f02667fd317c4059a6e09f4e51c87bda00928b8b34a82404458b7660e0bcb2eaded8881efddda704a57674dabf4fcfd5d1a6e781e31af3eb6de2bea520bf
SSDEEP 1536:2EgqiWKPkmEqaQuiCTNDRBgBA8Uy0TakYD2so++RNq4WZ3pdjqZQbyQD:2tfWqsQ9ODeqTaWCEK3paQbyY
MD5 SHA1 SHA512 SSDEEP

iframe/rolloutfile.tv7.1.tv

SHA256 b84ec5565876d956d3310754f4ac3cda404b87861cd839d9052377d24b269cf6
MD5 9d98b7dcb3662a5093b67bb317658336
SHA1 721e0681d69d797981a4eb038c5e971db63bd8a8
SHA512 29dce3c4b0e3018ea60f698f9e503132d3a1258484ed52eb859b966db6f610693da021f4cce18b218645e00df25d12a3dd0f0ca12fb202bb9ee1a80ec4f025e9
SSDEEP 768:GYWUoNA2MN3lB8Lpv112kT8WehaoyNe/l1r:G1G2830VNzTyaomKr
MD5 SHA1 SHA512 SSDEEP

iframe/rolloutfile.tv7.2.tv

SHA256 e54ae0c0c097794bdba876bbc6932c2b0d46d0dbb7d8748e15499ee29b94393d
MD5 28bf527437fb89e151ba91f8bc284e78
SHA1 9abe27d6ee8340d2b8e8866127c4da103ca8ccff
SHA512 b3a96490efd3ac15d101dc8efb5a6a42c5dc0ef00e570d5ba97367271c22dca4626546787f76247d5618bcb5824de631060962220f3e1b4e995580693b883904
SSDEEP 768:BW6NGRnE6g8WgRzWo2wSQfU4z/V8WCH96+gKwxnbwWISzoWUaIEdTRjdxg8:BW6zJgRzL2wPM4aJ6+gbxnRIE/0Ejng8
MD5 SHA1 SHA512 SSDEEP

iframe/rolloutfile.tv7.3.tv

SHA256 f21a97c909f1943b6c44fa52fb74607fe058a5cb8185ddaa2e6248d8c8c65228
MD5 30546f6cafb959925c6cd3320afefe29
SHA1 eb1abdb91e912846d75c0084bb0470ef789d1767
SHA512 10e897ccaf284d689f50f262359bd866da8e9a06d720d23a85940a568a91ec549415a7712724bf2fe4c57bb14923c58fec2c5e8606d7a557fe158ccd3692cc26
SSDEEP 768:BW6N3UDxNBLlrchxkV4YkcKYlhryzhyoiiukITflfas7uvus+tyYxEHnTHApcKSd:BW6pyxNBKhW4kZldM1lSl9yYxGnTgppM
MD5 SHA1 SHA512 SSDEEP

iframe/rolloutfile.tv7.4.tv

SHA256 6eb9341dd0427033c4e3dc20ae73594f950c9b6a8104e1cfd3d9a376bff10ff3
MD5 b5d0304390636af8a895ebf7a332a371
SHA1 fa121fef3dd58270925cabb212afe0781a85d513
SHA512 ceeda492efbb67574d07357a8ac3abbbeb505525a4a0d51365ca6dad5c7ed691479902cdbf547613fb817ae1a95e43f01d7db5b0572b4b03332967ac1fa6c72c
SSDEEP 1536:SsRP+bPj+6LQU2Uf0MYo1s1N6CylDsrquAwKo4Vi1g2GbhBNUCs0RoXbv:1RPuL+2QUnHs1NXylD4qa1g2G9Bmearv
MD5 SHA1 SHA512 SSDEEP

iframe/rolloutfile.tv8.0.tv

SHA256 035ce68799c807763cdcf5fb55c8e48a8298f071c6be4309a302f99ec7167773
MD5 370e952505d63f5831a5f7d8109b0218
SHA1 e641c87e0332bfed710832c2d1f8a62cb5f87cf3
SHA512 4d84e920ec3cf278bd4ba1c56776feda7f38d205bc0f9ad99510f8453ecce644c45df19eb94a414084f97d1d3cca9319027e5136b93e3796e13b2fe02f5a8ea9
SSDEEP 768:xFLMPX9OFBxa9oyGg4qJ+Gjo4xeM3G6VmbBcGWciJ01TZEcAHV83I:HMfww9YsPjHAGOBcZtJ01TZEHVd
MD5 SHA1 SHA512 SSDEEP

iframe/rolloutfile.tv8.1.tv

SHA256 a3198d82a1eb7feecdf7df6e6314bb4d6bd35c0c7268b86c6c074f7483bf9fe6
MD5 595745ec429941d11f9fd4d7ac6e087b
SHA1 ff29dc9f98b760e243a89afca73db4fb4b169691
SHA512 d249f0dc438bc0b69c917f276d397ebee8620e54aeac62567584090ed19b4a9b57299e90018aee63e501887a07016aacd16cad122211e4be8328942e9dc06e47
SSDEEP 384:DRTvSI7ioMHpLs/b7aMJ+p86Hnu40wpY4W5:DoI7inkZyHpy
MD5 SHA1 SHA512 SSDEEP

iframe/rolloutfile.tv9.0.tv

SHA256 21aeff72d120d7fb6765cea600cb6e836648bd1c264d031aa74c5873f4cbe986
MD5 38aab3f12727b293979e23fb1bcf5d5d
SHA1 7dc38ef9a95f9cf20b038e88bca6a1c2e41763ec
SHA512 de1e1dbc34e55757eac580ec8abf44d73317cde78e41e1da08c6a2023dd4bef086dbadfdaa11b128faf1e46b53a80cc43e09c16bd2c77dd8dedbd9452b4b6c67
SSDEEP 1536:BW60B8Mq07dPWbh47fkkQvPaOyP/V6snYJfLSxkf7K5SzR1zCdGRl1r1qMKQxOb:oFxBPmhKsXvPaOi/QPJ1fmEjmdQ3xS
MD5 SHA1 SHA512 SSDEEP

iframe/rolloutfile.tv9.1.tv

SHA256 939c366db03082edc389e61033beb95c81e089bc9d378f3b2f38402f4f2d5b5c
MD5 f48f62347a0a94d05823415ceb58ea9f
SHA1 da57a6825a7f4d517b88094bdb8d3b820d92cbac
SHA512 f00d73cd8b9a05da5f08e1e78591500231c3c3225bc085a2895fe5956535a583cf2ab35cc206f62813cd8ad4b0a16ccc2d696711db652c0fa8be86e1a0ee2e04
SSDEEP 768:BW6NNg+LijFFBgCDB6JONqkOB2LEbIMAagtiIJXsAK:BW6hLUFB/BT/OB2LwT7IC
MD5 SHA1 SHA512 SSDEEP

it.ini

SHA256 c8b7b5455f246ca043ea551befff1469211fdad057ce3922d175b75ca7a46c98
MD5 e96e2ddbab53113b492880673f9d56dc
SHA1 635c5c4502628258e01e74b180da90fe18d3e847
SHA512 56f6fc7c4f4ad0f35a77aa4dcfeab8843d838b5266acbde77b9a4edcc34d22fef28fe210ca8c307b8a86c4e5da2e3a9a79fb019f26b4f037b3deb8d17ad6dc5f
SSDEEP 384:cgnjFpiawkTaI3bXuDUOvPQdSlkK8E+5qLej+OBZNDRFePKqtV:cgnjriawkTaI3bXuDUOvPQdSlkK8E+wh
MD5 SHA1 SHA512 SSDEEP

ko.ini

SHA256 ef3f6e791d54283bbf1d3478db252e96685307036a025489ec96fbf294baea80
MD5 c769bfe8d432e8371390a1d31d7a79c1
SHA1 ed184f9ac88c8006305b6921d70d8fa6f2ed72b1
SHA512 a0fb3fb0a963606677afba207690e4ae4f1bead58915874f98fe65803fe4ed16f67444d7c47fb323ed3231b329318088f8c5e20e1e7dc9f81793cb2875e4a7db
SSDEEP 192:gEQ3rdrCvV2K6BWWeQsXKzpfXRSFs825TVgdEFFOFTCs90l3cgB4eQa004XEe0cU:RQ3rdrCt2K6BWWeQsXKzpfXRSFs825Tl
MD5 SHA1 SHA512 SSDEEP

pagy.picpay

SHA256 3fd61222635d6327fa2cbb1f14fb80bb21bdc590183974564bc09507e5e49a20
MD5 9d9be48da3636e333e8ca53572d43868
SHA1 9eebf2edab2756cbe971f797e7ee2f996c65a98d
SHA512 77ab9efa119db6e0bc66bcf47c62d0b2c2da3f282059df5eb2362971fdb91d6429ae7d71e93ca041a500df5f04b0c019ab9598355c18dd084c2b1308c0ba0356
SSDEEP 98304:Yzcj/YgBAaZFgpG4uLozCVicRnqIbPPpIsP78DxxeJa4zwybF9Bs+ief/qu:DBFZSpGdLfEcRnNbZX8Dxca4Pe+iUiu
MD5 SHA1 SHA512 SSDEEP

ru.ini

SHA256 359fb85e660d4c4b278d8e40bd328183a0c574f9cf57f9cb1fa5edea6c6a6d6e
MD5 e49f5681ee54cd06aea3c0008c999265
SHA1 feea47b2c941a1eec4e9350fc50be81495c84960
SHA512 9dd906e073798aee53cae54bee3d2f646e6692fcca4a29571b53d238127691c08c3539eb98ec4d5aa4dcacc24aaef4520e96751835c3dacd9ad4236036dec230
SSDEEP 384:WMHbMXtopKLlqi6qXK/j/bn9qyP99zT6Y3uOHlE2hbmUfeuLi:WMHbMXtopKLlqi6qXK/j/bn93P9N6yps
MD5 SHA1 SHA512 SSDEEP

se.ini

SHA256 d156b983f3761c29702a981e2a55bf567b2c72af54f386c78766f37f253b665b
MD5 600963928ab46f90b3d077fa3662b8e0
SHA1 930f3bf418edc94cfa8e6feaf6db1efba735a9fd
SHA512 bbc85fbe6ab3474ef7421cd1f77064eb3b6e9e873c25bdc4e60e4837f9b5d12597288608153fb98bb6077cf922a8764d05c9fa3bfa421dbbbb35722cd573d1e9
SSDEEP 384:dar/ZUAgXFx09KvOJhXorkgNcEthtkN/AcyOsmr9Y7v5M0GsOqyscyUodz14v:dar/ZUAgXFx09KvOJhXorkgNcEthtkNZ
MD5 SHA1 SHA512 SSDEEP

tr.ini

SHA256 9deee1a0a1871ca55adf9ae78eecc10b5dd1d97d1bff6060e5957ffe4f043b37
MD5 94714d77c08e6acdef2b255f7a48196d
SHA1 7f5f5d649b4934b1f38b9946e3dedb522b1a2f99
SHA512 7992593b976d1af4fbcf27969f92792161d4ebe544709c2b75495cc66fe13c814e25f7d0f2c08bdb5d003bc8a021ee9d1335a843510331a010eb03e3f403e96d
SSDEEP 384:KUqW/0Ft6FHHQTOugtuDvfS9HZxg6iBAX03p+sQ+hXNQI0yjk9fUnZGsCmbB3:KUk/6FHHQTOugtuDvfS9HZxg6iBAX0Zv
MD5 SHA1 SHA512 SSDEEP

word-Visualizador.exe

IMPHASH 82194d62560148a188204923283639d7
SHA256 e159d61d715a77b6270e10b03dc25eaf10e94e72004e027e3aa630ee31615037
MD5 d26255f827a47a2478f070599977533f
SHA1 bc0ec0846c87ccc819c65e04d33d4928362b83a4
SHA512 1c496afebba73218df7e8cc21f600b22a6cd90bde63c8757bdb9ba5d32b67e113565a5b90ae0824e10700b389175ea6f7c7d81ee58b3d6a5df1fc62719b3bc88
SSDEEP 196608:1VraQtPnGasU14Sx5cq88VEO0xsNzgouJAe2:LaQpnGq144n88mOnQJN
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Detect Lumma Stealer payload V2

Digest

fc:5b:85:34:ee:93:49:71:4e:26:dc:ba:db:09:39:50:4c:fa:04:8b:24:65:0c:79:db:02:af:3a:b4:1f:fe:1a

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

SERIALNUMBER=HRB 24085,CN=ASCOMP Software GmbH,O=ASCOMP Software GmbH,ST=Baden-Württemberg,C=DE,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.3=#13024445

Chains

Jul 4, 2024

SERIALNUMBER=HRB 24085,CN=ASCOMP Software GmbH,O=ASCOMP Software GmbH,ST=Baden-Württemberg,C=DE,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.3=#13024445

CN=Sectigo Public Code Signing CA EV R36,O=Sectigo Limited,C=GB

CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB

CN=AAA Certificate Services,O=Comodo CA Limited,L=Salford,ST=Greater Manchester,C=GB

Subject

CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB

Serial Number

48:fc:93:b4:60:55:94:8d:36:a7:c9:8a:89:d6:94:16

Issuer

CN=AAA Certificate Services,O=Comodo CA Limited,L=Salford,ST=Greater Manchester,C=GB

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

May 25, 2021 - Dec 31, 2028

Subject

CN=Sectigo Public Code Signing CA EV R36,O=Sectigo Limited,C=GB

Serial Number

33:d7:08:a8:91:40:53:19:e2:a5:bb:d3:39:b9:ad:6e

Issuer

CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Mar 22, 2021 - Mar 21, 2036

Subject

SERIALNUMBER=HRB 24085,CN=ASCOMP Software GmbH,O=ASCOMP Software GmbH,ST=Baden-Württemberg,C=DE,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.3=#13024445

Serial Number

57:7c:e5:9e:d9:bb:9a:4a:5c:69:36:13:2f:67:45:8f

Issuer

CN=Sectigo Public Code Signing CA EV R36,O=Sectigo Limited,C=GB

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Sep 11, 2023 - Sep 10, 2026

Subject

CN=Sectigo RSA Time Stamping CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Serial Number

30:0f:6f:ac:dd:66:98:74:7c:a9:46:36:a7:78:2d:b9

Issuer

CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

May 2, 2019 - Jan 18, 2038

Subject

CN=Sectigo RSA Time Stamping Signer #4,O=Sectigo Limited,ST=Manchester,C=GB

Serial Number

39:4c:25:e1:7c:a0:6d:27:a8:65:e2:3b:d9:1d:22:d4

Issuer

CN=Sectigo RSA Time Stamping CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Key Usages

KeyUsageDigitalSignature, KeyUsageContentCommitment

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

May 3, 2023 - Aug 2, 2034

Minor OS version

0

Major OS version

5

Entry point

6573616

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_BYTES_REVERSED_LO IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_BYTES_REVERSED_HI

PDB paths

oleaut32

SysFreeString SysReAllocStringLen SysAllocStringLen CreateErrorInfo GetErrorInfo SetErrorInfo VariantInit SysFreeString SafeArrayPtrOfIndex SafeArrayPutElement SafeArrayGetElement SafeArrayUnaccessData SafeArrayAccessData SafeArrayGetUBound SafeArrayGetLBound SafeArrayCreate VariantChangeType VariantCopyInd VariantCopy VariantClear VariantInit

advapi32

RegQueryValueExW RegOpenKeyExW RegCloseKey SetSecurityDescriptorDacl RegUnLoadKeyW RegSetValueExA RegSetValueExW RegSaveKeyW RegRestoreKeyW RegReplaceKeyW RegQueryValueExA RegQueryValueExW RegQueryInfoKeyA RegQueryInfoKeyW RegOpenKeyExA RegOpenKeyExW RegLoadKeyW RegFlushKey RegEnumValueW RegEnumKeyA RegEnumKeyExW RegDeleteValueA RegDeleteValueW RegDeleteKeyW RegCreateKeyExA RegCreateKeyExW RegConnectRegistryW RegCloseKey OpenProcessToken LookupPrivilegeValueW InitializeSecurityDescriptor GetUserNameA GetUserNameW GetTokenInformation FreeSid AllocateAndInitializeSid AdjustTokenPrivileges CryptDestroyHash CryptHashData CryptCreateHash CryptGetHashParam CryptReleaseContext CryptAcquireContextW

user32

LoadStringW MessageBoxA CharNextW CreateWindowExA CreateWindowExW WindowFromPoint WaitMessage ValidateRect UpdateLayeredWindow UpdateWindow UnregisterClassA UnregisterClassW UnhookWindowsHookEx TranslateMessage TranslateMDISysAccel TrackPopupMenu SystemParametersInfoW ShowWindow ShowScrollBar ShowOwnedPopups ShowCaret SetWindowRgn SetWindowsHookExW SetWindowTextA SetWindowTextW SetWindowPos SetWindowPlacement SetWindowLongA SetWindowLongW SetTimer SetScrollRange SetScrollPos SetScrollInfo SetRectEmpty SetRect SetPropW SetParent SetMenuItemInfoW SetMenu SetKeyboardState SetForegroundWindow SetFocus SetCursorPos SetCursor SetClipboardData SetClassLongW SetCaretPos SetCapture SetActiveWindow SendMessageTimeoutA SendMessageA SendMessageW ScrollWindowEx ScrollWindow ScreenToClient RemovePropW RemoveMenu ReleaseDC ReleaseCapture RegisterWindowMessageW RegisterClipboardFormatW RegisterClassA RegisterClassW RedrawWindow PtInRect PostThreadMessageA PostThreadMessageW PostQuitMessage PostMessageA PostMessageW PeekMessageA PeekMessageW OpenClipboard OffsetRect NotifyWinEvent MsgWaitForMultipleObjectsEx MsgWaitForMultipleObjects MessageBoxA MessageBoxW MessageBeep MapWindowPoints MapVirtualKeyW LoadStringW LoadKeyboardLayoutW LoadImageA LoadImageW LoadIconW LoadCursorW LoadBitmapW KillTimer IsZoomed IsWindowVisible IsWindowUnicode IsWindowEnabled IsWindow IsIconic IsDialogMessageA IsDialogMessageW IsClipboardFormatAvailable IsChild IsCharAlphaNumericW IsCharAlphaW InvalidateRect InsertMenuItemW InsertMenuW InflateRect HideCaret GetWindowThreadProcessId GetWindowTextLengthW GetWindowTextA GetWindowTextW GetWindowRect GetWindowPlacement GetWindowLongA GetWindowLongW GetWindowDC GetUpdateRect GetTopWindow GetSystemMetrics GetSystemMenu GetSysColorBrush GetSysColor GetSubMenu GetScrollRange GetScrollPos GetScrollInfo GetPropW GetParent GetWindow GetMessageTime GetMessagePos GetMessageExtraInfo GetMessageA GetMessageW GetMenuStringW GetMenuState GetMenuItemInfoW GetMenuItemID GetMenuItemCount GetMenu GetLastActivePopup GetKeyboardState GetKeyboardLayoutNameW GetKeyboardLayoutList GetKeyboardLayout GetKeyState GetKeyNameTextW GetIconInfo GetForegroundWindow GetFocus GetDoubleClickTime GetDlgItem GetDlgCtrlID GetDesktopWindow GetDCEx GetDC GetCursorPos GetCursor GetClipboardData GetClientRect GetClassNameA GetClassNameW GetClassLongW GetClassInfoW GetCaretPos GetCapture GetAsyncKeyState GetActiveWindow FrameRect FindWindowExW FindWindowA FindWindowW FillRect ExitWindowsEx EnumWindows EnumThreadWindows EnumClipboardFormats EnumChildWindows EndPaint EndMenu EndDeferWindowPos EnableWindow EnableScrollBar EnableMenuItem EmptyClipboard DrawTextExW DrawTextA DrawTextW DrawStateW DrawMenuBar DrawIconEx DrawIcon DrawFrameControl DrawFocusRect DrawEdge DispatchMessageA DispatchMessageW DestroyWindow DestroyMenu DestroyIcon DestroyCursor DestroyCaret DeleteMenu DeferWindowPos DefWindowProcA DefWindowProcW DefMDIChildProcW DefFrameProcW CreatePopupMenu CreateMenu CreateIcon CreateCaret CreateAcceleratorTableW CountClipboardFormats CopyIcon CloseClipboard ClientToScreen ChildWindowFromPoint CheckMenuItem CharUpperBuffW CharUpperW CharNextW CharLowerBuffW CharLowerW CallWindowProcA CallWindowProcW CallNextHookEx BringWindowToTop BeginPaint BeginDeferWindowPos AttachThreadInput CharUpperBuffA AdjustWindowRectEx ActivateKeyboardLayout EnumDisplayMonitors GetMonitorInfoW MonitorFromPoint MonitorFromRect MonitorFromWindow

kernel32

lstrcmpiA LoadLibraryA LocalFree LocalAlloc Sleep VirtualFree VirtualAlloc SwitchToThread GetACP GetSystemInfo GetTickCount QueryPerformanceCounter GetVersion GetCurrentThreadId VirtualQuery WideCharToMultiByte SetCurrentDirectoryW MultiByteToWideChar lstrlenW lstrcpynW LoadLibraryExW IsValidLocale GetSystemDefaultUILanguage GetStartupInfoA GetProcAddress GetModuleHandleW GetModuleFileNameW GetUserDefaultUILanguage GetLocaleInfoW GetLastError GetCurrentDirectoryW GetCommandLineW FreeLibrary FindFirstFileW FindClose ExitProcess ExitThread CreateThread CompareStringW WriteFile UnhandledExceptionFilter SetFilePointer SetEndOfFile RtlUnwind ReadFile RaiseException GetStdHandle GetFileSize GetFileType DeleteCriticalSection LeaveCriticalSection EnterCriticalSection InitializeCriticalSection CreateFileW CloseHandle TlsSetValue TlsGetValue LocalAlloc GetModuleHandleW lstrlenW lstrcmpiW lstrcmpA lstrcmpW WritePrivateProfileStringW WriteFile WideCharToMultiByte WaitForSingleObject WaitForMultipleObjectsEx VirtualQueryEx VirtualQuery VirtualProtect VirtualFree VirtualAlloc UnmapViewOfFile TryEnterCriticalSection TerminateThread TerminateProcess SystemTimeToFileTime SwitchToThread SuspendThread Sleep SizeofResource SetUnhandledExceptionFilter SetThreadPriority SetThreadLocale SetLastError SetFilePointer SetFileAttributesA SetFileAttributesW SetEvent SetErrorMode SetEndOfFile SetCurrentDirectoryW ResumeThread ResetEvent RemoveDirectoryA RemoveDirectoryW ReleaseMutex ReadProcessMemory ReadFile RaiseException QueryPerformanceFrequency QueryPerformanceCounter QueryDosDeviceW IsDebuggerPresent OutputDebugStringW OpenProcess OpenFileMappingA OpenFileMappingW MultiByteToWideChar MulDiv MoveFileW MapViewOfFile LockResource LocalSize LocalFree LocalAlloc LoadResource LoadLibraryExA LoadLibraryA LoadLibraryW LeaveCriticalSection IsValidLocale IsDBCSLeadByte IsBadReadPtr InitializeCriticalSection GlobalUnlock GlobalSize GlobalMemoryStatus GlobalLock GlobalFree GlobalFindAtomW GlobalDeleteAtom GlobalAlloc GlobalAddAtomW GetWindowsDirectoryA GetWindowsDirectoryW GetVersionExA GetVersionExW GetVersion GetTimeZoneInformation GetTickCount GetThreadPriority GetThreadLocale GetThreadContext GetTempPathA GetTempPathW GetTempFileNameW GetSystemTime GetSystemDirectoryW GetSystemDefaultLangID GetStdHandle GetProcAddress GetPrivateProfileStringW GetPriorityClass GetModuleHandleA GetModuleHandleW GetModuleFileNameA GetModuleFileNameW GetLogicalDriveStringsW GetLocaleInfoA GetLocaleInfoW GetLocalTime GetLastError GetFullPathNameW GetFileTime GetFileSize GetFileAttributesA GetFileAttributesW GetExitCodeThread GetEnvironmentVariableW GetDiskFreeSpaceA GetDiskFreeSpaceW GetDateFormatW GetCurrentThreadId GetCurrentThread GetCurrentProcessId GetCurrentProcess GetCurrentDirectoryA GetCurrentDirectoryW GetComputerNameA GetComputerNameW GetCommandLineA GetCommandLineW GetCPInfoExW GetCPInfo GetACP FreeResource InterlockedIncrement InterlockedExchangeAdd InterlockedExchange InterlockedDecrement InterlockedCompareExchange FreeLibrary FormatMessageA FormatMessageW FlushInstructionCache FlushFileBuffers FindResourceA FindResourceW FindNextFileA FindNextFileW FindFirstFileA FindFirstFileW FindClose FileTimeToSystemTime FileTimeToLocalFileTime FileTimeToDosDateTime ExpandEnvironmentStringsA ExpandEnvironmentStringsW ExitThread ExitProcess EnumSystemLocalesW EnumCalendarInfoW EnterCriticalSection DuplicateHandle DeleteFileA DeleteFileW DeleteCriticalSection CreateThread CreateProcessA CreateProcessW CreatePipe CreateMutexA CreateMutexW CreateFileMappingA CreateFileMappingW CreateFileA CreateFileW CreateEventA CreateEventW CreateDirectoryA CreateDirectoryW CopyFileA CopyFileW CompareStringA CompareStringW CloseHandle Beep RtlUnwind Sleep MulDiv

msimg32

AlphaBlend

gdi32

UnrealizeObject TextOutA TextOutW StretchDIBits StretchBlt StartPage StartDocA StartDocW SetWindowOrgEx SetWindowExtEx SetWinMetaFileBits SetViewportOrgEx SetViewportExtEx SetTextColor SetTextAlign SetStretchBltMode SetROP2 SetPixel SetPaletteEntries SetMapMode SetEnhMetaFileBits SetDIBits SetDIBColorTable SetBrushOrgEx SetBkMode SetBkColor SetAbortProc SelectPalette SelectObject SelectClipRgn SaveDC RoundRect RestoreDC ResizePalette Rectangle RectVisible RealizePalette Polyline Polygon PolyPolyline PolyBezierTo PolyBezier PlayEnhMetaFile Pie PatBlt OffsetWindowOrgEx MoveToEx MaskBlt LineTo LPtoDP IntersectClipRect GetWindowOrgEx GetWindowExtEx GetWinMetaFileBits GetViewportOrgEx GetViewportExtEx GetTextMetricsA GetTextMetricsW GetTextFaceA GetTextExtentPointW GetTextExtentPoint32A GetTextExtentPoint32W GetTextExtentExPointW GetTextColor GetTextAlign GetSystemPaletteEntries GetStockObject GetRgnBox GetPixel GetPaletteEntries GetObjectA GetObjectW GetNearestPaletteIndex GetNearestColor GetMapMode GetFontData GetEnhMetaFilePaletteEntries GetEnhMetaFileHeader GetEnhMetaFileDescriptionW GetEnhMetaFileBits GetDeviceCaps GetDIBits GetDIBColorTable GetCurrentPositionEx GetClipBox GetBrushOrgEx GetBitmapBits GdiFlush FrameRgn ExtTextOutW ExtFloodFill ExtCreatePen ExcludeClipRect Escape EnumFontsW EnumFontFamiliesExW EndPage EndDoc Ellipse DeleteObject DeleteEnhMetaFile DeleteDC CreateSolidBrush CreateRoundRectRgn CreateRectRgnIndirect CreateRectRgn CreatePenIndirect CreatePen CreatePalette CreateICW CreateHalftonePalette CreateFontIndirectW CreateFontA CreateFontW CreateEnhMetaFileW CreateDIBitmap CreateDIBSection CreateDCW CreateCompatibleDC CreateCompatibleBitmap CreateBrushIndirect CreateBitmap CopyEnhMetaFileW CombineRgn CloseEnhMetaFile Chord BitBlt ArcTo Arc AngleArc AbortDoc

version

VerQueryValueA VerQueryValueW GetFileVersionInfoSizeA GetFileVersionInfoSizeW GetFileVersionInfoA GetFileVersionInfoW

ole32

CreateStreamOnHGlobal OleUninitialize OleInitialize CoTaskMemFree CoTaskMemAlloc CoCreateGuid StringFromGUID2 CLSIDFromString StringFromCLSID CoCreateInstance CoUninitialize CoInitialize IsEqualGUID

comctl32

InitializeFlatSB FlatSB_SetScrollProp FlatSB_SetScrollPos FlatSB_SetScrollInfo FlatSB_GetScrollPos FlatSB_GetScrollInfo _TrackMouseEvent ImageList_GetImageInfo ImageList_SetIconSize ImageList_GetIconSize ImageList_Write ImageList_Read ImageList_GetDragImage ImageList_DragShowNolock ImageList_DragMove ImageList_DragLeave ImageList_DragEnter ImageList_EndDrag ImageList_BeginDrag ImageList_Copy ImageList_LoadImageW ImageList_GetIcon ImageList_Remove ImageList_DrawIndirect ImageList_DrawEx ImageList_Replace ImageList_Draw ImageList_SetOverlayImage ImageList_GetBkColor ImageList_SetBkColor ImageList_ReplaceIcon ImageList_Add ImageList_SetImageCount ImageList_GetImageCount ImageList_Destroy ImageList_Create InitCommonControls

shell32

SHGetFileInfoW ShellExecuteExA ShellExecuteExW ShellExecuteA ShellExecuteW SHAppBarMessage DragQueryPoint DragQueryFileW DragAcceptFiles SHGetSpecialFolderLocation SHGetPathFromIDListW SHGetMalloc SHGetPathFromIDListA SHGetSpecialFolderLocation SHGetMalloc

wininet

InternetGetConnectedState InternetReadFile InternetOpenA InternetConnectA InternetCloseHandle HttpSendRequestW HttpQueryInfoW HttpOpenRequestA

comdlg32

PrintDlgW GetSaveFileNameA GetSaveFileNameW GetOpenFileNameW

wsock32

WSACleanup WSAStartup WSAGetLastError gethostbyname socket setsockopt sendto send select recvfrom recv ioctlsocket inet_addr htons connect closesocket bind

winspool.drv

OpenPrinterW EnumPrintersW DocumentPropertiesW DeviceCapabilitiesW ClosePrinter GetDefaultPrinterW

gdiplus

GdipGetPenFillType GdipGetImageGraphicsContext GdipGetImageThumbnail GdipGetImagePixelFormat GdipSetLinePresetBlend GdipSetPathGradientPresetBlend GdipSetPathGradientWrapMode GdipSetLineGammaCorrection GdipGetImageAttributesAdjustedPalette GdipSetImageAttributesWrapMode GdipSetImageAttributesRemapTable GdipSetImageAttributesOutputChannelColorProfile GdipSetImageAttributesOutputChannel GdipSetImageAttributesColorKeys GdipSetImageAttributesNoOp GdipSetImageAttributesGamma GdipSetImageAttributesThreshold GdipSetImageAttributesColorMatrix GdipResetImageAttributes GdipSetImageAttributesToIdentity GdipDisposeImageAttributes GdipCloneImageAttributes GdipCreateImageAttributes GdipIsMatrixIdentity GdipIsMatrixInvertible GdipGetMatrixElements GdipVectorTransformMatrixPointsI GdipVectorTransformMatrixPoints GdipTransformMatrixPointsI GdipTransformMatrixPoints GdipInvertMatrix GdipShearMatrix GdipRotateMatrix GdipScaleMatrix GdipTranslateMatrix GdipMultiplyMatrix GdipSetMatrixElements GdipDeleteMatrix GdipCloneMatrix GdipCreateMatrix3I GdipCreateMatrix3 GdipCreateMatrix2 GdipCreateMatrix GdipGetTextureImage GdipGetTextureWrapMode GdipSetTextureWrapMode GdipRotateTextureTransform GdipScaleTextureTransform GdipTranslateTextureTransform GdipSetWorldTransform GdipResetTextureTransform GdipCreateTextureIAI GdipCreateTexture2I GdipCreateTextureIA GdipCreateTexture2 GdipCreateTexture GdipSetPathGradientGammaCorrection GdipAddPathRectangleI GdipAddPathRectangle GdipAddPathBezier GdipResetClip GdipAddPathCurve2I GdipAddPathCurve GdipAddPathCurveI GdipAddPathPolygonI GdipAddPathPolygon GdipAddPathLine2I GdipSetPenEndCap GdipBitmapSetPixel GdipBitmapGetPixel GdipCreateHBITMAPFromBitmap GdipCreateBitmapFromScan0 GdipCreateBitmapFromStream GdipCreateBitmapFromStreamICM GdipImageRotateFlip GdipGetCompositingQuality GdipSetCompositingQuality GdipCombineRegionRegion GdipCombineRegionPath GdipDeleteRegion GdipCreateRegionPath GdipCreateRegionRect GdipSetClipPath GdipSetClipRegion GdipSetClipRect GdipGetStringFormatHotkeyPrefix GdipSetStringFormatHotkeyPrefix GdipSetPenDashStyle GdipGetPenDashStyle GdipGetImageHeight GdipGetImageWidth GdipSaveAddImage GdipDisposeImage GdipLoadImageFromStreamICM GdipLoadImageFromStream GdipLoadImageFromFile GdipLoadImageFromFileICM GdipSaveImageToStream GdipSaveImageToFile GdipFillPath GdipFillPolygonI GdipFillPolygon GdipCreateLineBrushI GdipCreateLineBrush GdipDrawBeziers GdipDrawBezier GdipDrawArc GdipDrawLine GdipDrawRectangle GdipSetPenBrushFill GdipGetPenBrushFill GdipDrawImageRectRect GdipDrawImageRect GdipDrawImageI GdipGetImageRawFormat GdipGetStringFormatTrimming GdipSetStringFormatTrimming GdipGetStringFormatLineAlign GdipSetStringFormatLineAlign GdipGetStringFormatFlags GdipSetStringFormatFlags GdipGetStringFormatAlign GdipSetStringFormatAlign GdipCloneStringFormat GdipDeleteStringFormat GdipCreateStringFormat GdipMeasureString GdipDrawString GdipDeleteFont GdipCreateFont GdipGetGenericFontFamilyMonospace GdipGetGenericFontFamilySerif GdipGetGenericFontFamilySansSerif GdipDeleteFontFamily GdipCreateFontFamilyFromName GdipGraphicsClear GdipFillRectangle GdipDrawPath GdipGetTextRenderingHint GdipRotateWorldTransform GdipScaleWorldTransform GdipTranslateWorldTransform GdipMultiplyWorldTransform GdipResetWorldTransform GdipSetTextRenderingHint GdipGetSmoothingMode GdipSetSmoothingMode GdipReleaseDC GdipGetDC GdipDeleteGraphics GdipCreateFromHDC GdipFlush GdipDeletePen GdipDrawEllipseI GdipDrawEllipse GdipCreatePen2 GdipCreatePen1 GdipGetPathGradientSurroundColorCount GdipGetPathGradientPointCount GdipSetPathGradientCenterPointI GdipSetPathGradientCenterPoint GdipGetPathGradientCenterPointI GdipGetPathGradientCenterPoint GdipSetPathGradientSurroundColorsWithCount GdipGetPathGradientSurroundColorsWithCount GdipSetPathGradientCenterColor GdipGetPathGradientCenterColor GdipCreatePathGradientFromPath GdipResetPath GdipCreateLineBrushFromRectWithAngleI GdipCreateLineBrushFromRectWithAngle GdipCreateLineBrushFromRectI GdipCreateLineBrushFromRect GdipGetHatchBackgroundColor GdipGetHatchForegroundColor GdipGetHatchStyle GdipCreateSolidFill GdipCreateHatchBrush GdipDeleteBrush GdipAddPathString GdipAddPathPie GdipAddPathEllipse GdipAddPathArc GdipGetPathPoints GdipGetPointCount GdipAddPathLine GdipGetPathWorldBounds GdipClosePathFigure GdipDeletePath GdipGetPathTypes GdipCreatePath2 GdipCreatePath GdipFillEllipseI GdipFillEllipse GdiplusShutdown GdiplusStartup GdipFree GdipAlloc GdipEmfToWmfBits GdipDrawCachedBitmap GdipSetStringFormatMeasurableCharacterRanges GdipGetStringFormatMeasurableCharacterRangeCount GdipGetStringFormatDigitSubstitution GdipSetStringFormatDigitSubstitution GdipGetStringFormatTabStopCount GdipGetStringFormatTabStops GdipSetStringFormatTabStops GdipGetStringFormatHotkeyPrefix GdipSetStringFormatHotkeyPrefix GdipGetStringFormatTrimming GdipSetStringFormatTrimming GdipGetStringFormatLineAlign GdipSetStringFormatLineAlign GdipGetStringFormatAlign GdipSetStringFormatAlign GdipGetStringFormatFlags GdipSetStringFormatFlags GdipCloneStringFormat GdipDeleteStringFormat GdipStringFormatGetGenericTypographic GdipStringFormatGetGenericDefault GdipCreateStringFormat GdipMeasureDriverString GdipDrawDriverString GdipMeasureCharacterRanges GdipMeasureString GdipDrawString GdipGetLogFontW GdipGetLogFontA GdipGetFontHeightGivenDPI GdipGetFontHeight GdipGetFontUnit GdipGetFontSize GdipGetFontStyle GdipGetFamily GdipDeleteFont GdipCloneFont GdipCreateFont GdipCreateFontFromLogfontW GdipCreateFontFromLogfontA GdipCreateFontFromDC GdipGetLineSpacing GdipGetCellDescent GdipGetCellAscent GdipGetEmHeight GdipIsStyleAvailable GdipGetFamilyName GdipGetGenericFontFamilyMonospace GdipGetGenericFontFamilySerif GdipGetGenericFontFamilySansSerif GdipCloneFontFamily GdipDeleteFontFamily GdipCreateFontFamilyFromName GdipComment GdipGetImageEncoders GdipGetImageEncodersSize GdipGetMetafileDownLevelRasterizationLimit GdipSetMetafileDownLevelRasterizationLimit GdipRecordMetafileStreamI GdipRecordMetafileStream GdipRecordMetafileFileNameI GdipRecordMetafileFileName GdipRecordMetafileI GdipRecordMetafile GdipCreateMetafileFromStream GdipCreateMetafileFromWmfFile GdipCreateMetafileFromFile GdipCreateMetafileFromEmf GdipCreateMetafileFromWmf GdipGetHemfFromMetafile GdipGetMetafileHeaderFromMetafile GdipGetMetafileHeaderFromStream GdipGetMetafileHeaderFromFile GdipGetMetafileHeaderFromEmf GdipGetMetafileHeaderFromWmf GdipEndContainer GdipBeginContainer2 GdipBeginContainerI GdipBeginContainer GdipRestoreGraphics GdipSaveGraphics GdipIsVisibleRectI GdipIsVisibleRect GdipIsVisiblePointI GdipIsVisiblePoint GdipIsVisibleClipEmpty GdipGetVisibleClipBoundsI GdipGetVisibleClipBounds GdipIsClipEmpty GdipGetClipBoundsI GdipGetClipBounds GdipGetClip GdipTranslateClipI GdipTranslateClip GdipResetClip GdipSetClipHrgn GdipSetClipRegion GdipSetClipPath GdipSetClipRectI GdipSetClipRect GdipSetClipGraphics GdipPlayMetafileRecord GdipEnumerateMetafileSrcRectDestPointsI GdipEnumerateMetafileSrcRectDestPoints GdipEnumerateMetafileSrcRectDestRectI GdipEnumerateMetafileSrcRectDestRect GdipEnumerateMetafileSrcRectDestPointI GdipEnumerateMetafileSrcRectDestPoint GdipEnumerateMetafileDestPointsI GdipEnumerateMetafileDestPoints GdipEnumerateMetafileDestRectI GdipEnumerateMetafileDestRect GdipEnumerateMetafileDestPointI GdipEnumerateMetafileDestPoint GdipDrawImagePointsRectI GdipDrawImagePointsRect GdipDrawImageRectRectI GdipDrawImageRectRect GdipDrawImagePointRectI GdipDrawImagePointRect GdipDrawImagePointsI GdipDrawImagePoints GdipDrawImageRectI GdipDrawImageRect GdipDrawImageI GdipDrawImage GdipFillRegion GdipFillClosedCurve2I GdipFillClosedCurve2 GdipFillClosedCurveI GdipFillClosedCurve GdipFillPath GdipFillPieI GdipFillPie GdipFillEllipseI GdipFillEllipse GdipFillPolygonI GdipFillPolygon GdipFillRectanglesI GdipFillRectangles GdipFillRectangleI GdipFillRectangle GdipGraphicsClear GdipDrawClosedCurve2I GdipDrawClosedCurve2 GdipDrawClosedCurveI GdipDrawClosedCurve GdipDrawCurve3I GdipDrawCurve3 GdipDrawCurve2I GdipDrawCurve2 GdipDrawCurveI GdipDrawCurve GdipDrawPath GdipDrawPolygonI GdipDrawPolygon GdipDrawPieI GdipDrawPie GdipDrawEllipseI GdipDrawEllipse GdipDrawRectanglesI GdipDrawRectangles GdipDrawRectangleI GdipDrawRectangle GdipDrawBeziersI GdipDrawBeziers GdipDrawBezierI GdipDrawBezier GdipDrawArcI GdipDrawArc GdipDrawLinesI GdipDrawLines GdipDrawLineI GdipDrawLine GdipCreateHalftonePalette GdipGetNearestColor GdipTransformPointsI GdipTransformPoints GdipGetDpiY GdipGetDpiX GdipSetPageScale GdipSetPageUnit GdipGetPageScale GdipGetPageUnit GdipGetWorldTransform GdipRotateWorldTransform GdipScaleWorldTransform GdipTranslateWorldTransform GdipMultiplyWorldTransform GdipResetWorldTransform GdipSetWorldTransform GdipGetInterpolationMode GdipSetInterpolationMode GdipGetTextContrast GdipSetTextContrast GdipGetTextRenderingHint GdipSetTextRenderingHint GdipGetPixelOffsetMode GdipSetPixelOffsetMode GdipGetSmoothingMode GdipSetSmoothingMode GdipGetCompositingQuality GdipSetCompositingQuality GdipGetRenderingOrigin GdipSetRenderingOrigin GdipGetCompositingMode GdipSetCompositingMode GdipReleaseDC GdipGetDC GdipDeleteGraphics GdipCreateFromHWNDICM GdipCreateFromHWND GdipCreateFromHDC2 GdipCreateFromHDC GdipFlush GdipGetImageAttributesAdjustedPalette GdipSetImageAttributesWrapMode GdipSetImageAttributesRemapTable GdipSetImageAttributesOutputChannelColorProfile GdipSetImageAttributesOutputChannel GdipSetImageAttributesColorKeys GdipSetImageAttributesNoOp GdipSetImageAttributesGamma GdipSetImageAttributesThreshold GdipSetImageAttributesColorMatrix GdipResetImageAttributes GdipSetImageAttributesToIdentity GdipDisposeImageAttributes GdipCloneImageAttributes GdipCreateImageAttributes GdipBitmapSetResolution GdipBitmapSetPixel GdipBitmapGetPixel GdipBitmapUnlockBits GdipBitmapLockBits GdipCloneBitmapAreaI GdipCloneBitmapArea GdipCreateBitmapFromResource GdipCreateHICONFromBitmap GdipCreateBitmapFromHICON GdipCreateHBITMAPFromBitmap GdipCreateBitmapFromHBITMAP GdipCreateBitmapFromGdiDib GdipCreateBitmapFromGraphics GdipCreateBitmapFromScan0 GdipCreateBitmapFromFileICM GdipCreateBitmapFromStreamICM GdipCreateBitmapFromFile GdipCreateBitmapFromStream GdipSetPropertyItem GdipRemovePropertyItem GdipGetAllPropertyItems GdipGetPropertySize GdipGetPropertyItem GdipGetPropertyItemSize GdipGetPropertyIdList GdipGetPropertyCount GdipGetImagePaletteSize GdipSetImagePalette GdipGetImagePalette GdipImageRotateFlip GdipImageSelectActiveFrame GdipImageGetFrameCount GdipImageGetFrameDimensionsList GdipImageGetFrameDimensionsCount GdipGetEncoderParameterList GdipGetEncoderParameterListSize GdipGetImageThumbnail GdipGetImagePixelFormat GdipGetImageRawFormat GdipGetImageFlags GdipGetImageVerticalResolution GdipGetImageHorizontalResolution GdipGetImageHeight GdipGetImageWidth GdipGetImageType GdipGetImageDimension GdipGetImageBounds GdipGetImageGraphicsContext GdipSaveAddImage GdipSaveAdd GdipSaveImageToStream GdipSaveImageToFile GdipDisposeImage GdipCloneImage GdipLoadImageFromFileICM GdipLoadImageFromStreamICM GdipLoadImageFromFile GdipLoadImageFromStream GdipGetCustomLineCapWidthScale GdipSetCustomLineCapWidthScale GdipGetCustomLineCapBaseInset GdipSetCustomLineCapBaseInset GdipGetCustomLineCapBaseCap GdipSetCustomLineCapBaseCap GdipGetCustomLineCapStrokeJoin GdipSetCustomLineCapStrokeJoin GdipGetCustomLineCapStrokeCaps GdipSetCustomLineCapStrokeCaps GdipCloneCustomLineCap GdipDeleteCustomLineCap GdipCreateCustomLineCap GdipGetPenCompoundArray GdipSetPenCompoundArray GdipGetPenCompoundCount GdipGetPenDashArray GdipSetPenDashArray GdipGetPenDashCount GdipSetPenDashOffset GdipGetPenDashOffset GdipSetPenDashStyle GdipGetPenDashStyle GdipGetPenFillType GdipGetPenBrushFill GdipSetPenBrushFill GdipGetPenColor GdipSetPenColor GdipRotatePenTransform GdipScalePenTransform GdipTranslatePenTransform GdipMultiplyPenTransform GdipResetPenTransform GdipGetPenTransform GdipSetPenTransform GdipGetPenMode GdipSetPenMode GdipGetPenMiterLimit GdipSetPenMiterLimit GdipGetPenCustomEndCap GdipSetPenCustomEndCap GdipGetPenCustomStartCap GdipSetPenCustomStartCap GdipGetPenLineJoin GdipSetPenLineJoin GdipGetPenDashCap197819 GdipGetPenEndCap GdipGetPenStartCap GdipSetPenDashCap197819 GdipSetPenEndCap GdipSetPenStartCap GdipSetPenLineCap197819 GdipGetPenWidth GdipSetPenWidth GdipDeletePen GdipClonePen GdipCreatePen2 GdipCreatePen1 GdipRotateLineTransform GdipScaleLineTransform GdipTranslateLineTransform GdipMultiplyLineTransform GdipResetLineTransform GdipSetLineTransform GdipGetLineTransform GdipGetLineWrapMode GdipSetLineWrapMode GdipSetLineLinearBlend GdipSetLineSigmaBlend GdipSetLinePresetBlend GdipGetLinePresetBlend GdipGetLinePresetBlendCount GdipSetLineBlend GdipGetLineBlend GdipGetLineBlendCount GdipGetLineGammaCorrection GdipSetLineGammaCorrection GdipGetLineRectI GdipGetLineRect GdipGetLineColors GdipSetLineColors GdipCreateLineBrushFromRectWithAngleI GdipCreateLineBrushFromRectWithAngle GdipCreateLineBrushFromRectI GdipCreateLineBrushFromRect GdipCreateLineBrushI GdipCreateLineBrush GdipGetSolidFillColor GdipSetSolidFillColor GdipCreateSolidFill GdipGetTextureImage GdipGetTextureWrapMode GdipSetTextureWrapMode GdipRotateTextureTransform GdipScaleTextureTransform GdipTranslateTextureTransform GdipMultiplyTextureTransform GdipResetTextureTransform GdipSetTextureTransform GdipGetTextureTransform GdipCreateTextureIAI GdipCreateTexture2I GdipCreateTextureIA GdipCreateTexture2 GdipCreateTexture GdipGetHatchBackgroundColor GdipGetHatchForegroundColor GdipGetHatchStyle GdipCreateHatchBrush GdipGetBrushType GdipDeleteBrush GdipCloneBrush GdipGetRegionScansI GdipGetRegionScans GdipGetRegionScansCount GdipIsVisibleRegionRectI GdipIsVisibleRegionRect GdipIsVisibleRegionPointI GdipIsVisibleRegionPoint GdipGetRegionData GdipGetRegionDataSize GdipIsEqualRegion GdipIsInfiniteRegion GdipIsEmptyRegion GdipGetRegionHRgn GdipGetRegionBoundsI GdipGetRegionBounds GdipTransformRegion GdipTranslateRegionI GdipTranslateRegion GdipCombineRegionRegion GdipCombineRegionPath GdipCombineRegionRectI GdipCombineRegionRect GdipSetEmpty GdipSetInfinite GdipDeleteRegion GdipCloneRegion GdipCreateRegionHrgn GdipCreateRegionRgnData GdipCreateRegionPath GdipCreateRegionRectI GdipCreateRegionRect GdipCreateRegion GdipIsMatrixEqual GdipIsMatrixIdentity GdipIsMatrixInvertible GdipGetMatrixElements GdipVectorTransformMatrixPointsI GdipVectorTransformMatrixPoints GdipTransformMatrixPointsI GdipTransformMatrixPoints GdipInvertMatrix GdipShearMatrix GdipRotateMatrix GdipScaleMatrix GdipTranslateMatrix GdipMultiplyMatrix GdipSetMatrixElements GdipDeleteMatrix GdipCloneMatrix GdipCreateMatrix3I GdipCreateMatrix3 GdipCreateMatrix2 GdipCreateMatrix GdipIsOutlineVisiblePathPointI GdipIsOutlineVisiblePathPoint GdipIsVisiblePathPointI GdipIsVisiblePathPoint GdipGetPathWorldBoundsI GdipGetPathWorldBounds GdipTransformPath GdipWarpPath GdipWidenPath GdipWindingModeOutline GdipFlattenPath GdipAddPathPolygonI GdipAddPathPieI GdipAddPathEllipseI GdipAddPathRectanglesI GdipAddPathRectangleI GdipAddPathClosedCurve2I GdipAddPathClosedCurveI GdipAddPathCurve3I GdipAddPathCurve2I GdipAddPathCurveI GdipAddPathBeziersI GdipAddPathBezierI GdipAddPathArcI GdipAddPathLine2I GdipAddPathLineI GdipAddPathStringI GdipAddPathString GdipAddPathPath GdipAddPathPolygon GdipAddPathPie GdipAddPathEllipse GdipAddPathRectangles GdipAddPathRectangle GdipAddPathClosedCurve2 GdipAddPathClosedCurve GdipAddPathCurve3 GdipAddPathCurve2 GdipAddPathCurve GdipAddPathBeziers GdipAddPathBezier GdipAddPathArc GdipAddPathLine2 GdipAddPathLine GdipGetPathLastPoint GdipReversePath GdipClearPathMarkers GdipSetPathMarker GdipClosePathFigures GdipClosePathFigure GdipStartPathFigure GdipGetPathData GdipSetPathFillMode GdipGetPathFillMode GdipGetPathPointsI GdipGetPathPoints GdipGetPathTypes GdipGetPointCount GdipResetPath GdipDeletePath GdipClonePath GdipCreatePath2I GdipCreatePath2 GdipCreatePath GdipFree GdipAlloc GdiplusShutdown GdiplusStartup

oleacc

LresultFromObject

winmm

sndPlaySoundW

crypt32

CertOpenSystemStoreW CryptSignMessage CertGetNameStringW CertGetCertificateContextProperty CertFreeCertificateContext CertEnumCertificatesInStore CertCloseStore PFXIsPFXBlob PFXImportCertStore

usp10

ScriptIsComplex ScriptGetGlyphABCWidth ScriptPlace ScriptShape ScriptLayout ScriptItemize ScriptFreeCache

Name

.text

Size

6.3MB

Virtual Size

6.3MB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.itext

Size

12KB

Virtual Size

11KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.data

Size

263KB

Virtual Size

263KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.bss

Size

Virtual Size

35KB

Characteristics

IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.idata

Size

45KB

Virtual Size

44KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.didata

Size

1KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.edata

Size

512B

Virtual Size

76B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.tls

Size

Virtual Size

644B

Characteristics

IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rdata

Size

512B

Virtual Size

24B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

480KB

Virtual Size

480KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

.rsrc

Size

1.2MB

Virtual Size

1.2MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

word.zip

ar.ini

bg.ini

bin/ALL_base.dat

bin/BG.lng

bin/CA.lng

bin/CS.lng

bin/Config.dat

bin/DA.lng

bin/DE.lng

bin/EN.lng

bin/ES.lng

bin/ET.lng

bin/FN.lng

bin/FR.lng

bin/HR.lng

bin/HU.lng

bin/ICRDGT_base.dat

bin/ID.lng

bin/IT.lng

bin/LT.lng

bin/LV.lng

bin/NB.lng

bin/NL.lng

bin/NSOCR.dll

kernel32

user32

msimg32

winspool.drv

advapi32

shell32

shlwapi

gdi32

uxtheme

ole32

oleaut32

wtsapi32

gdiplus

oleacc

imm32

winmm

generic

bin/NsBars.dll

kernel32

user32

oleaut32

advapi32

generic

bin/NsImgLdr.dll

kernel32

ws2_32

generic

bin/NsSpell.dll

kernel32

generic

bin/PL.lng

bin/PT.lng

bin/RO.lng

bin/RU.lng

bin/SK.lng

bin/SL.lng

bin/SV.lng

bin/TR.lng

bin/Twaindsm.dll

PE Signature issue

kernel32

user32

gdi32

advapi32

generic

bin/gray.icc

bin/jnsocr.dll

kernel32

generic

bin/pdf_font.ttf